Medium - CVE-2024-13508 - The Booking Package plugin for WordPress is...
The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72 due to insufficient input sanitization...
Medium - CVE-2025-1447 - A vulnerability was found in kasuganosoras...
A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the...
NA - CVE-2024-57262 - In barebox before 2025.01.0,...
In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a...
High - CVE-2025-1448 - A vulnerability was found in Synway SMG Gateway...
A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The...
High - CVE-2024-11582 - The Subscribe2 – Form, Email Subscribers &...
The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to...
Medium - CVE-2024-13443 - The Easypromos Plugin plugin for WordPress is...
The Easypromos Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Easypromos shortcode in all versions up to, and including, 1.3.8 due to insufficient...