1798 matches found
📄 WordPress Likes and Dislikes 1.0.0 SQL Injection
The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the post parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
PT-2025-24616 · WordPress · Inprosysmedia-Likes-Dislikes-Post
Name of the Vulnerable Software and Affected Versions: inprosysmedia-likes-dislikes-post WordPress plugin version 1.0.0 Description: The issue arises from the plugin's failure to properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to...
PT-2025-24531 · Unknown · Unfoldwp Blogty
Name of the Vulnerable Software and Affected Versions: Unfoldwp Blogty versions 1.0.0 through 1.0.11 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...
CVE-2025-49127 Kafbat UI vulnerable to Remote Code Execution by JMX in Metrices Configuration
Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue...
kafbat-ui 代码问题漏洞
kafbat-ui is an open source Web UI for managing Apache Kafka clusters from Kafbat Open Source. A code issue vulnerability exists in kafbat-ui version 1.0.0 that stems from insecure deserialization and could lead to the execution of arbitrary code...
WordPress WP Online Users Stats plugin <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via hk_dataset_results Function vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting via hkdatasetresults Function vulnerability discovered by rajanhoyr in WordPress Plugin WP Online Users Stats versions = 1.0.0...
Malicious code in world-id-lens-dapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d27d63976b7108297f8d9a29062b3add9973c83849fd5ab7cd8fbd31b0248701 The OpenSSF Package Analysis project identified 'world-id-lens-dapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2025-5287
The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2025-5325
A vulnerability has been found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adpweb/a/ica/api/service/rfa/testService. The manipulation leads to improper neutralization of...
Zhilink ADP Application Developer Platform 安全漏洞
Zhilink ADP Application Developer Platform is an application development platform from Zhilink, which provides one-stop development tools and environment to support rapid building and deployment of enterprise-level applications. A security vulnerability exists in Zhilink ADP Application Developer...
PT-2025-23200 · Zhilink · Zhilink Adp Application Developer Platform
Name of the Vulnerable Software and Affected Versions: Zhilink ADP Application Developer Platform version 1.0.0 Description: A critical issue was found in the Zhilink ADP Application Developer Platform, affecting some unknown functionality of the file /adpweb/wechat/verifyToken/. This issue leads...
WordPress plugin Likes and Dislikes Plugin SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
FreeFloat FTP Server 安全漏洞
FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server version 1.0.0, which stems from the GET Command Handler component failing to properly validate the length size of the input data, no details of the vulnerability are provided at...
CVE-2025-46460
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Detheme Easy Guide wp-easy-guide allows SQL Injection.This issue affects Easy Guide: from n/a through = 1.0.0...
Malicious code in ghpglobaldata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f6628f3ea3766cb44c71cab1c1a8301235db7c97a186af48166d59c09863c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-23656
Missing Authorization vulnerability in Saul Morales Pacheco Donate visa donate-visa allows Stored XSS.This issue affects Donate visa: from n/a through = 1.0.0...
CVE-2025-22262
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WittyFolk Bonjour Bar bonjour-bar allows Stored XSS.This issue affects Bonjour Bar: from n/a through = 1.0.0...
CVE-2024-52486
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SolverWp Elementor Portfolio Builder portfolio-builder-elementor allows DOM-Based XSS.This issue affects Elementor Portfolio Builder: from n/a through = 1.0.0...