The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12. This is due to missing authorization on the heartbeat_received() function that t ...
Continue ReadingMarch 07, 2023
The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.1.1. This is due to missing or incorrect nonce validation on the view() function ...
Continue ReadingMarch 07, 2023
A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part of the file login.php. The manipulation ...
Continue ReadingMarch 07, 2023
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at memberMemberLevel.php.Read More ...
Continue ReadingMarch 07, 2023
A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file birthing_print.ph ...
Continue ReadingMarch 07, 2023
The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and including 4.1.9 (pro) and 2.0.6 (free). The plugin has a feature to add an "Info Box" to ...
Continue ReadingMarch 07, 2023
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.Read More ...
Continue ReadingMarch 07, 2023
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can ...
Continue ReadingMarch 07, 2023
Back to Main