The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59. This is due to missing nonce validation in the 'wpr_create_mega_me ...
Continue Reading
January 11, 2023
Spitfire CMS 1.0.475 is vulnerable to PHP Object Injection.Read More ...
Continue Reading
January 11, 2023
The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient inpu ...
Continue Reading
January 11, 2023
A vulnerability has been found in fabarea media_upload and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.php. The ma ...
Continue Reading
January 10, 2023
A vulnerability was found in mapoor voteapp. It has been rated as critical. Affected by this issue is the function create_poll/do_poll/show_poll/show_refresh of the file app.py. The manipulation leads ...
Continue Reading
January 10, 2023
This issue affects: Bulutses Bilgi Teknolojileri LTD. à žTð. BULUTDESK CALLCENTER versions prior to 3.0.Read More ...
Continue Reading
January 10, 2023
72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue Reading
January 10, 2023
This issue affects: Terminal Operating System versions before 5.0.13Read More ...
Continue Reading
January 10, 2023
Back to Main
