WordPress Booqable Rental plugin <= 2.4.21 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Booqable Rental versions = 2.4.21...

WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin Activity Plus Reloaded for BuddyPress versions = 1.1.2...

WordPress onOffice for WP-Websites plugin <= 6.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Plugin onOffice for WP-Websites versions = 6.5.1...

WordPress Advanced Post List plugin <= 0.5.6.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Advanced Post List versions = 0.5.6.2...

WordPress Post Grid Master plugin <= 3.4.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Post Grid Master versions = 3.4.17...

WordPress Nexa Blocks plugin <= 1.1.1 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin Nexa Blocks versions = 1.1.1...

WordPress Chaport <= 1.1.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by haudayroi - BlueRock in WordPress Plugin Chaport versions = 1.1.6...

WordPress Slack Notifications by dorzki plugin <= 2.0.7 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Aiden in WordPress Plugin Slack Notifications by dorzki versions = 2.0.7...

WordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Simple Keyword to Link versions = 1.5...

WordPress WP-Recall plugin <= 16.26.14 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by 0xd4rk5id3 in WordPress Plugin WP-Recall versions = 16.26.14...

WordPress Elite Video Player plugin <= 10.0.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Anhchangmutrang in WordPress Plugin Elite Video Player versions = 10.0.5...

WordPress Libro de Reclamaciones y Quejas plugin <= 0.9 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by 0x1ceKing in WordPress Plugin Libro de Reclamaciones y Quejas versions = 0.9...

WordPress ThemeHunk plugin <= 1.1.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin ThemeHunk versions = 1.1.2...

WordPress Premium Packages plugin <= 6.0.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin WPDM – Premium Packages versions = 6.0.6...

WordPress CubeWP plugin <= 1.1.29 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin CubeWP versions = 1.1.29...

WordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by domiee13 in WordPress Plugin Widgetize Pages Light versions = 3.0...

WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by timomangcut in WordPress Plugin External Store for Shopify versions = 1.5.9...

WordPress Payment QR WooCommerce plugin <= 1.1.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by ch4r0n in WordPress Plugin Payment QR WooCommerce versions = 1.1.6...

WordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin Image Hover Effects Block versions = 1.4.5...

CVE-2025-5625 Campcodes Online Teacher Record Management System search-teacher.php sql injection

A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-teacher.php. The manipulation of the argument searchteacher leads to sql injection. The attack may be initiated remotel...