NA - CVE-2024-13608 - The Track Logins WordPress plugin through 1.0...
The Track Logins WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
NA - CVE-2024-13625 - The Tube Video Ads Lite WordPress plugin...
The Tube Video Ads Lite WordPress plugin through 1.5.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be...
NA - CVE-2024-13626 - The VR-Frases (collect & share quotes)...
The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...
NA - CVE-2024-13627 - The OWL Carousel Slider WordPress plugin...
The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used...
NA - CVE-2024-13726 - The Coder WordPress plugin through 1.3.4 does...
The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a...
NA - CVE-2024-47935 - Improper Validation of Integrity Check Value...
Improper Validation of Integrity Check Value vulnerability in TXOne Networks StellarProtect (Legacy Mode), StellarEnforce, and Safe Lock allows an attacker to escalate their privileges in the...
Low - CVE-2025-1378 - A vulnerability, which was classified as...
A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation...
Medium - CVE-2025-1379 - A vulnerability has been found in code-projects...
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file...
Medium - CVE-2025-1380 - A vulnerability was found in Codezips Gym...
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/del_plan.php. The...
Medium - CVE-2025-1381 - A vulnerability was found in code-projects Real...
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax_city.php. The manipulation...