49993 matches found
NPM: protobufjs: Text Format string map parsing can mutate returned map object prototype
NPM: protobufjs: Text Format string map parsing can mutate returned map object prototype vulnerability discovered by ? in WordPress Npm protobufjs versions = 8.2.0, = 8.6.4...
NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing
NPM: protobufjs: Denial of Service via infinite loop in .proto option parsing vulnerability discovered by ? in WordPress Npm protobufjs versions = 7.5.0, = 7.6.4...
NPM: webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
NPM: webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header vulnerability discovered by ? in WordPress Npm webpack-dev-server versions = 5.2.5...
NPM: webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
NPM: webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints vulnerability discovered by ? in WordPress Npm webpack-dev-server versions = 5.2.5...
NPM: Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch
NPM: Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch vulnerability discovered by ? in WordPress Npm astro versions = 6.4.7, 6.4.8...
NPM: node-tar: Process crash via PAX numeric path type confusion
NPM: node-tar: Process crash via PAX numeric path type confusion vulnerability discovered by ? in WordPress Npm tar versions = 7.5.17...
NPM: node-tar: Decompression/parse DoS via unlimited input
NPM: node-tar: Decompression/parse DoS via unlimited input vulnerability discovered by ? in WordPress Npm tar versions = 7.5.18...
NPM: node-tar: Negative tar entry size causes infinite loop in archive replace
NPM: node-tar: Negative tar entry size causes infinite loop in archive replace vulnerability discovered by ? in WordPress Npm tar versions = 7.5.17...
NPM: node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records
NPM: node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records vulnerability discovered by ? in WordPress Npm tar versions = 7.5.16...
NPM: Socket.IO: Engine.IO Polling Transport Connection Exhaustion
NPM: Socket.IO: Engine.IO Polling Transport Connection Exhaustion vulnerability discovered by ? in WordPress Npm engine.io versions = 4.1.0, 6.6.7...
NPM: shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
NPM: shell-quote: Quadratic-complexity Denial of Service in parse CWE-407 vulnerability discovered by ? in WordPress Npm shell-quote versions = 1.8.4...
NPM: Directus: Authorization-dependent response served from unsegmented cache key
NPM: Directus: Authorization-dependent response served from unsegmented cache key vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import
NPM: Directus: SSRF Protection Bypass via 0.0.0.0 in File Import vulnerability discovered by ? in WordPress Npm directus versions 12.0.0...
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml vulnerability discovered by ? in WordPress Npm js-yaml versions = 5.0.0, = 5.1.0...
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption vulnerability discovered by ? in WordPress Npm js-yaml versions = 3.0.0, 3.15.0...
NPM: js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA
NPM: js-yaml: Quadratic-complexity On^2 DoS via !!omap tag in YAML11SCHEMA vulnerability discovered by ? in WordPress Npm js-yaml versions = 5.0.0, = 5.2.0...
NPM: Astro: Reflected XSS via unescaped View Transition animation properties
NPM: Astro: Reflected XSS via unescaped View Transition animation properties vulnerability discovered by ? in WordPress Npm astro versions = 2.9.0, = 7.0.9...
NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
NPM: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding groups vulnerability discovered by ? in WordPress Npm brace-expansion versions 1.1.16...
WordPress Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Essential Addons for Elementor versions = 6.6.11...
WordPress Tutor LMS Elementor Addons plugin <= 4.0.0 - Missing Authorization to Authenticated (Subscriber+) Tutor LMS and Elementor plugin Activation vulnerability
Missing Authorization to Authenticated Subscriber+ Tutor LMS and Elementor plugin Activation vulnerability discovered by ? in WordPress Plugin Tutor LMS Elementor Addons versions = 4.0.0...
WordPress MapSVG – Vector maps, Image maps, Google Maps plugin <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload vulnerability
Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin MapSVG versions = 8.14.0...
NPM: Axios: Excessive recursion in formDataToJSON can cause denial of service
NPM: Axios: Excessive recursion in formDataToJSON can cause denial of service vulnerability discovered by ? in WordPress Npm axios versions = 0.28.0, 0.33.0...
NPM: Axios: Prototype pollution auth subfields can inject Basic auth
NPM: Axios: Prototype pollution auth subfields can inject Basic auth vulnerability discovered by ? in WordPress Npm axios versions = 1.15.2, 1.18.0...
NPM: Axios: Deep formToJSON Key Recursion Can Cause Denial of Service
NPM: Axios: Deep formToJSON Key Recursion Can Cause Denial of Service vulnerability discovered by ? in WordPress Npm axios versions = 0.28.0, 0.33.0...
WordPress WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Contact Form by WPForms versions = 2.0.0.1...
WordPress Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin <= 6.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Essential Addons for Elementor versions = 6.6.11...
WordPress Smart Manager plugin <= 8.90.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Smart Manager versions = 8.90.0...
WordPress Spectra Legacy – Gutenberg Blocks plugin <= 2.19.28 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by ? in WordPress Plugin Spectra versions = 2.19.28...
WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dutafi in WordPress Plugin Sunshine Photo Cart versions = 3.6.10.1...
WordPress Real Estate Manager Pro plugin <= 12.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Real Estate Manager Pro versions = 12.8.5...
WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by manop55555 in WordPress Plugin Slider Pro versions = 4.8.13...
WordPress Picture Gallery plugin <= 1.6.5 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by hhhai in WordPress Plugin Picture Gallery versions = 1.6.5...
NPM: ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
NPM: ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes vulnerability discovered by ? in WordPress Npm exifreader versions = 4.40.0...
NPM: mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath
NPM: mcp-memory-keeper: Arbitrary local file read in contextimport via unvalidated filePath vulnerability discovered by ? in WordPress Npm mcp-memory-keeper versions 0.13.0...
WordPress Core <= 7.0.1 - Unauthenticated REST API Batch Request Handler Confusion
Unauthenticated REST API Batch Request Handler Confusion vulnerability discovered by Adam Kues in WordPress core versions = 7.0.1...
WordPress Core <= 7.0.1 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by TF1T, dtro, and haongo in WordPress core versions = 7.0.1...
WordPress W3SC Elementor to Zoho CRM plugin <= 2.2.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by ? in WordPress Plugin W3SC Elementor to Zoho CRM versions = 2.2.0...
WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by yangsori in WordPress Plugin TrueBooker versions = 1.2.3...
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.6.18 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Peter Thaleikis in WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress versions = 4.6.18...
WordPress SureForms plugin <= 2.2.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by andrea bocchetti in WordPress Plugin SureForms versions = 2.2.1...
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.17 - SQL Injection vulnerability
SQL Injection vulnerability discovered by shaman0x01 - Shaman Red Team in WordPress Plugin Booking calendar, Appointment Booking System versions = 3.2.17...
WordPress Ultimate Member plugin <= 2.10.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Muhamad Visat in WordPress Plugin Ultimate Member versions = 2.10.1...
WordPress GEO my WP plugin <= 4.5.4 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by ? in WordPress Plugin GEO my WordPress versions = 4.5.4...
WordPress Under Construction plugin <= 5.76 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by Nguyen Ngoc Duc duc193 in WordPress Plugin Under Construction versions = 5.76...
WordPress miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability
Unauthenticated Authentication Bypass to Administrator Account Takeover vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin WordPress Social Login and Register versions = 7.7.0...
WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Sprout Clients versions = 3.2.3...
WordPress Autopay dla WooCommerce plugin <= 2.2.27 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Averon Averenkov in WordPress Plugin Autopay dla WooCommerce versions = 2.2.27...
WordPress Download Monitor - WPForms Lock plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability
WordPress Download Monitor - WPForms Lock plugin = 1.0.4 - Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Download Monitor - WPForms Lock versions = 1.0.4...