The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied paramet ...
Continue ReadingMarch 17, 2023
Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin Read More ...
Continue ReadingMarch 17, 2023
The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sa ...
Continue ReadingMarch 17, 2023
Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin Read More ...
Continue ReadingMarch 17, 2023
The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on ...
Continue ReadingMarch 17, 2023
A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_quest ...
Continue ReadingMarch 17, 2023
A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of ...
Continue ReadingMarch 17, 2023
Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a ta ...
Continue ReadingMarch 17, 2023
Back to Main