Medium - CVE-2024-22341 - IBM Watson Query on Cloud Pak for Data 4.0.0...
IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote...
Medium - CVE-2024-13873 - The WP Job Portal – A Complete Recruitment...
The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.8...
High - CVE-2024-13899 - The Mambo Importer plugin for WordPress is...
The Mambo Importer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0 via deserialization of untrusted input via the $data parameter in the...
High - CVE-2025-1509 - The The Show Me The Cookies plugin for...
The The Show Me The Cookies plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.0. This is due to the software allowing users to execute an...
High - CVE-2025-1510 - The The Custom Post Type Date Archives plugin...
The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is due to the software allowing users to...
Medium - CVE-2024-12038 - The Post Form – Registration Form – Profile...
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
Medium - CVE-2024-12467 - The Pago por Redsys plugin for WordPress is...
The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to...
High - CVE-2024-13474 - The LTL Freight Quotes – Purolator Edition...
The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and...
Medium - CVE-2024-13798 - The Post Grid and Gutenberg Blocks –...
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5. This is due to insufficient...