High - CVE-2025-6399 - A vulnerability, which was classified as...
A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST...
NA - CVE-2025-5034 - The wp-file-download WordPress plugin before...
The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
High - CVE-2025-6400 - A vulnerability was found in TOTOLINK N300RH...
A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formPortFw of the component...
Medium - CVE-2025-5143 - The TableOn – WordPress Posts Table Filterable...
The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableon_popup_iframe_button shortcode in all versions up to,...
Low - CVE-2025-6401 - A vulnerability was found in TOTOLINK N300RH...
A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. It has been classified as problematic. This affects an unknown part of the file /boafrm/formFilter of the component HTTP POST...
High - CVE-2025-6402 - A vulnerability was found in TOTOLINK X15...
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP...
High - CVE-2025-6403 - A vulnerability was found in code-projects...
A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of...
Medium - CVE-2025-5289 - The 3D FlipBook – PDF Embedder, PDF Flipbook...
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all...
High - CVE-2025-6404 - A vulnerability classified as critical has been...
A vulnerability classified as critical has been found in Campcodes Online Teacher Record Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of...
Medium - CVE-2025-36016 - IBM Process Mining 2.0.1 IF001 and 2.0.1 could...
IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a...