CVE-2025-53249

Cross-Site Request Forgery CSRF vulnerability in hakeemnala Build App Online build-app-online allows Cross Site Request Forgery.This issue affects Build App Online: from n/a through = 1.0.23...

PT-2025-33522 · WordPress · School Management System For Wordpress

Name of the Vulnerable Software and Affected Versions: School Management System for WordPress plugin versions prior to 93.2.0 Description: The School Management System for WordPress plugin is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file. This...

CVE-2025-53241

Server-Side Request Forgery SSRF vulnerability in kodeshpa Simplified simplified allows Server Side Request Forgery.This issue affects Simplified: from n/a through = 1.0.11...

CVE-2025-50029

Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through = 4.0.7...

PT-2025-33205 · Boldgrid · Boldgrid – Visual Drag/Drop Editor +1

Name of the Vulnerable Software and Affected Versions: BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor versions through 1.27.8 Description: A path traversal flaw exists in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor. This issue allows path...

CVE-2023-48766

Cross-Site Request Forgery CSRF vulnerability in SVGator SVGator – Add Animated SVG Easily.This issue affects SVGator – Add Animated SVG Easily: from n/a through 1.2.4...

CVE-2023-48328

Cross-Site Request Forgery CSRF vulnerability in Imagely WordPress Gallery Plugin – NextGEN Gallery allows Cross Site Request Forgery.This issue affects WordPress Gallery Plugin – NextGEN Gallery: from n/a through 3.37...

CVE-2023-52226

Cross-Site Request Forgery CSRF vulnerability in Advanced Flamingo.This issue affects Advanced Flamingo: from n/a through 1.0...

PT-2025-22043 · Unknown · Themovation Hotel + Bed/Breakfast Booking Calendar Theme | Bellevue

Name of the Vulnerable Software and Affected Versions: Themovation Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue versions through 4.2.2 Description: The issue is related to a Missing Authorization vulnerability. There is no information provided about the estimated number of...

PT-2025-21974 · Unknown · Multivendorx

Name of the Vulnerable Software and Affected Versions: MultiVendorX versions through 4.2.22 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions throu...

CVE-2025-32245

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup Apollo allows SQL Injection. This issue affects Apollo: from n/a through 3.6.3...

CVE-2025-39417

Cross-Site Request Forgery CSRF vulnerability in Eslam Mahmoud Redirect wordpress to welcome or landing page redirect-to-welcome-or-landing-page allows Stored XSS.This issue affects Redirect wordpress to welcome or landing page: from n/a through = 2.0...

CVE-2025-30908

Cross-Site Request Forgery CSRF vulnerability in Shamalli Web Directory Free web-directory-free allows Stored XSS.This issue affects Web Directory Free: from n/a through = 1.7.6...

PT-2025-7769

Name of the Vulnerable Software and Affected Versions: Önceki Yazı Link versions n/a through 1.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This vulnerability allows for Cross Site Request Forgery. Recommendations: For Önceki Yazı Link versions n/a throu...

PT-2025-5463 · Paytm · Paytm Payment Donation

Name of the Vulnerable Software and Affected Versions: Paytm Payment Donation versions n/a through 2.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions n/a...

PT-2024-36751 · W3 Eden · W3 Eden Download Manager

Name of the Vulnerable Software and Affected Versions: W3 Eden, Inc. Download Manager versions n/a through 3.3.03 Description: A Missing Authorization issue exists in W3 Eden, Inc. Download Manager, involving incorrectly configured access control security levels. This allows for exploiting these...

PT-2024-36172 · Unknown · Justin Fletcher Role Includer

Name of the Vulnerable Software and Affected Versions: Justin Fletcher Role Includer versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means an attacker can...

PT-2024-34746 · Unknown · Media Modal

Name of the Vulnerable Software and Affected Versions: Media Modal versions through 1.0.2 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS vulnerability, which allows for DOM-Based XSS attacks. This means...

CVE-2024-50441

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CozyThemes Cozy Blocks allows Stored XSS.This issue affects Cozy Blocks: from n/a through 2.0.15...

PT-2024-33358 · Slider · Slider

Name of the Vulnerable Software and Affected Versions: cSlider versions n/a through 2.4.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also sto...