High - CVE-2024-13475 - The Small Package Quotes – UPS Edition plugin...
The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient...
High - CVE-2024-13490 - The LTL Freight Quotes – XPO Edition plugin for...
The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and...
High - CVE-2024-13528 - The Customer Email Verification for WooCommerce...
The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.9.5. This is due to the presence of a shortcode...
High - CVE-2024-13531 - The ShipEngine Shipping Quotes plugin for...
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on...
NA - CVE-2024-32838 - SQL Injection vulnerability in various API...
SQL Injection vulnerability in various API endpoints - offices, dashboards, etc. Apache Fineract versions 1.9 and before have a vulnerability that allows an authenticated attacker to inject...
Medium - CVE-2025-0506 - The Rise Blocks – A Complete Gutenberg Page...
The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the titleTag parameter in all versions up to, and including, 3.6 due to...
Medium - CVE-2025-1189 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation...
Low - CVE-2025-1190 - A vulnerability has been found in code-projects...
A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/load_user-profile.php. The...
Medium - CVE-2025-1191 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file...
Medium - CVE-2025-1192 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The...