EUVD-2025-210236

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

EUVD-2025-210204

Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...

EUVD-2025-210233

Unauthenticated Local File Inclusion in Snowy = 1.13 versions...

EUVD-2025-210182

Unauthenticated Local File Inclusion in ITactics = 1.0 versions...

EUVD-2025-210177

Unauthenticated Local File Inclusion in Grecko = 5.17 versions...

EUVD-2025-210180

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

EUVD-2025-210174

Unauthenticated Cross Site Scripting XSS in Grand Car Rental = 3.7 versions...

EUVD-2025-210171

Unauthenticated Local File Inclusion in Putter = 1.17 versions...

EUVD-2025-210179

Unauthenticated Local File Inclusion in Choreo = 1.6 versions...

EUVD-2025-210175

Unauthenticated Local File Inclusion in Printo = 1.11 versions...

EUVD-2025-210184

Unauthenticated Local File Inclusion in Truemag = 4.3.14.2 versions...

EUVD-2025-210206

Unauthenticated Arbitrary File Deletion in Car Zone = 3.7 versions...

EUVD-2026-37555

In Contacts Provider, there is a possible way to access an incoming call's phone number and associated metadata due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-210229

Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin = 2.7.2 versions...

EUVD-2025-210234

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

EUVD-2025-210183

Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...

EUVD-2025-210178

Unauthenticated Local File Inclusion in WineShop = 3.17 versions...

EUVD-2025-210232

Unauthenticated Local File Inclusion in Quirky = 1.23 versions...

EUVD-2025-210181

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

EUVD-2025-210173

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

EUVD-2025-210226

Unauthenticated Local File Inclusion in AirSupply = 2.0.0 versions...

EUVD-2025-210194

Unauthenticated Local File Inclusion in Nexio = 1.10.0 versions...

EUVD-2025-210198

Unauthenticated Local File Inclusion in Corbesier = 1.15.0 versions...

EUVD-2025-210192

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

EUVD-2025-210210

Unauthenticated Local File Inclusion in Dom = 1.24 versions...

EUVD-2025-210197

Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...

EUVD-2025-210231

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

EUVD-2025-210202

Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...

EUVD-2025-210239

HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity...

EUVD-2025-210188

Unauthenticated Cross Site Scripting XSS in Qreatix = 1.9.4 versions...

EUVD-2025-210200

Unauthenticated PHP Object Injection in SeaFood Company = 1.4 versions...

EUVD-2025-210193

Unauthenticated Local File Inclusion in Planty = 1.14.0 versions...

EUVD-2025-210187

Subscriber Arbitrary Content Deletion in Brikk = 3.0.0 versions...

EUVD-2025-210207

Unauthenticated Local File Inclusion in Kelly Young = 1.1.0 versions...

EUVD-2025-210203

Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site = 1.0.7 versions...

EUVD-2025-210189

Unauthenticated Local File Inclusion in Modernee = 1.6.0 versions...

EUVD-2025-210195

Unauthenticated Local File Inclusion in MaxiNet = 1.2.10 versions...

EUVD-2025-210190

Unauthenticated Local File Inclusion in Rosaleen = 2.8 versions...

EUVD-2025-210205

Subscriber Broken Access Control in Genemy = 1.6.6 versions...

EUVD-2025-210230

Subscriber Privilege Escalation in Genemy = 1.6.6 versions...

EUVD-2025-210225

Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...

EUVD-2025-210228

Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site = 1.0.7 versions...

EUVD-2025-210191

Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...

EUVD-2025-210199

Unauthenticated Local File Inclusion in Deliciosa = 1.10.0 versions...

EUVD-2025-210201

Unauthenticated Local File Inclusion in Especio = 1.0 versions...

EUVD-2025-210196

Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...

EUVD-2025-210227

Unauthenticated Local File Inclusion in Ingenioso = 1.14.0 versions...

EUVD-2025-210218

Unauthenticated Local File Inclusion in Neuronet 1.14.0 versions...

EUVD-2024-55627

Unauthenticated Cross Site Scripting XSS in my flatonica = 0.0.8 versions...

EUVD-2024-55637

Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AliNext: from n/a through 3.3.5...