Medium - CVE-2024-13821 - The WP Booking Calendar plugin for WordPress is...
The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not...
Medium - CVE-2025-1185 - A vulnerability was found in pihome-shc PiHome...
A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql...
Medium - CVE-2025-1186 - A vulnerability was found in dayrui XunRuiCMS...
A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the...
High - CVE-2024-12315 - The Export All Posts, Products, Orders, Refunds...
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory....
Medium - CVE-2024-13814 - The The Global Gallery - WordPress Responsive...
The The Global Gallery - WordPress Responsive Gallery plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 9.1.5. This is due to the software...
Medium - CVE-2025-1187 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in code-projects Police FIR Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Delete Record...
Medium - CVE-2025-1188 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file...
Critical - CVE-2024-12213 - The WP Job Board Pro plugin for WordPress is...
The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the...
High - CVE-2024-12296 - The Apus Framework plugin for WordPress is...
The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the...
Critical - CVE-2024-13365 - The Security & Malware scan by CleanTalk plugin...
The Security & Malware scan by CleanTalk plugin for WordPress is vulnerable to arbitrary file uploads due to the plugin uploading and extracting .zip archives when scanning them for malware through...