WordPress SEO Help plugin <= 6.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin SEO Help versions = 6.7.5...

WordPress Specia Companion plugin <= 6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Aiden in WordPress Plugin Specia Companion versions = 6.2...

WordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika in WordPress Plugin Broadstreet Ads versions = 1.52.1...

CVE-2025-3342

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/paymentsave.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The...

WordPress Piotnet Forms plugin <= 1.0.30 - Path Traversal vulnerability

Path Traversal vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Piotnet Forms versions = 1.0.30...

WordPress Nearby Locations Plugin <= 1.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Nearby Locations versions = 1.1.1...

WordPress Accessibility Suite plugin <= 4.18 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by theviper17 in WordPress Plugin Accessibility Suite versions = 4.18...

WordPress Total processing card payments for WooCommerce Plugin <= 7.1.5 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by LVT-tholv2k in WordPress Plugin Nomupay Payment Processing Gateway versions = 7.1.5...

WordPress 5sterrenspecialist plugin <= 1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin WordPress 5sterrenspecialist Plugin versions = 1.4...

WordPress Global Gallery plugin <= 8.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Global Gallery versions = 8.8.0...

WordPress QR Master plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin QR Master versions = 1.0.5...

WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Widgetize Pages Light versions = 3.0...

WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability

Bypass vulnerability discovered by astra.r3verii in WordPress Plugin Survey Maker versions = 5.1.6.3...

WordPress Asgaros Forum plugin <= 3.0.0 - File Upload Numbers Bypass vulnerability

File Upload Numbers Bypass vulnerability discovered by 20kilograma in WordPress Plugin Asgaros Forum versions = 3.0.0...

CVE-2025-3335 codeprojects Online Restaurant Management System category_update.php sql injection

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/categoryupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-3334

Codeprojects Online Restaurant Management System 1.0 is affected via the /admin/category_save.php endpoint, where unsafely handling the Category parameter yields SQL injection. The issue is remotely exploitable and reportedly disclosed publicly. Root cause: improper validation/escaping of the Cat...

openSUSE Security Advisory (SUSE-SU-2025:1125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Streamit Theme <= 4.0.1 is vulnerable to Arbitrary File Upload

Software Streamit Type Theme Vulnerable versions = 4.0.1 Fixed in 4.0.2 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2025-2525 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 0e50f93134fe Credits István Márton Required privilege Subscriber...

WordPress Streamit Theme <= 4.0.2 is vulnerable to Privilege Escalation

Software Streamit Type Theme Vulnerable versions = 4.0.2 Fixed in 4.0.3 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2025-2526 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 6913aeb6838d Credits István Márton...

SUSE: Security Advisory (SUSE-SU-2025:1128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...