Medium - CVE-2025-1183 - A vulnerability has been found in CodeZips Gym...
A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file...
Medium - CVE-2025-1184 - A vulnerability was found in pihome-shc PiHome...
A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModal_MQTTEdit. The manipulation...
NA - CVE-2025-26520 - Cacti through 1.2.29 allows SQL injection in...
Cacti through 1.2.29 allows SQL injection in the template function in host_templates.php via the graph_template parameter. NOTE: this issue exists because of an incomplete fix for CVE-2024-54146.
NA - CVE-2023-49780 - Cross-site scripting vulnerability exists in...
Cross-site scripting vulnerability exists in acmailer CGI ver.4.0.5 and earlier. An arbitrary script may be executed on the web browser of the user who accessed the management page of the affected...
Medium - CVE-2024-13794 - The WP Ghost (Hide My WP Ghost) – Security &...
The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not...
Medium - CVE-2024-13821 - The WP Booking Calendar plugin for WordPress is...
The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not...
Medium - CVE-2025-1185 - A vulnerability was found in pihome-shc PiHome...
A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql...
Medium - CVE-2025-1186 - A vulnerability was found in dayrui XunRuiCMS...
A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the...
High - CVE-2024-12315 - The Export All Posts, Products, Orders, Refunds...
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory....
Medium - CVE-2024-13814 - The The Global Gallery - WordPress Responsive...
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software...