| Page(s) : 1 ... 104 105 106 107 108 109 110 111 112 113 [114] 115 116 117 118 119 120 121 122 123 124 ... | Result(s) : 312940 |
Alerts
| DATE | NAME | CATEGORIES | DETAIL | |
|---|---|---|---|---|
| 9.8 | 2025-03-14 | CVE-2024-11286 | cve | The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1. This is due to the plugin not properly verifying a user... |
| 5.3 | 2025-03-14 | CVE-2025-0955 | cve | The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorev_import_single_video' AJAX action in ... |
| 5.3 | 2025-03-14 | CVE-2025-1285 | cve | The Resido - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the delete_api_key and save_api_key AJAX a... |
| 4.3 | 2025-03-14 | CVE-2025-1528 | cve | The Search & Filter Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_meta_values' function in all ve... |
| 7.5 | 2025-03-14 | CVE-2025-2056 | cve | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function... |
| 6.1 | 2025-03-14 | CVE-2025-2166 | cve | The CM FAQ – Simplify support with an intuitive FAQ management tool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg with... |
| 8.8 | 2025-03-14 | CVE-2024-13376 | cve | The Industrial theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the _ajax_get_to... |
| 8.8 | 2025-03-14 | CVE-2024-13913 | cve | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.0.83. This is due... |
| 8.1 | 2025-03-14 | CVE-2025-0952 | cve | The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missi... |
| 7.5 | 2025-03-14 | CVE-2025-1764 | cve | The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due ... |
| 8.8 | 2025-03-14 | CVE-2025-2103 | cve | The SoundRise Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on theironMus... |
| 8.8 | 2025-03-14 | CVE-2025-2289 | cve | The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, an... |
| 9.8 | 2025-03-14 | CVE-2024-13824 | cve | The CiyaShop - Multipurpose WooCommerce Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.19.0 via deserialization of untru... |
| 7.5 | 2025-03-14 | CVE-2025-2221 | cve | The WPCOM Member plugin for WordPress is vulnerable to time-based SQL Injection via the ‘user_phone’ parameter in all versions up to, and including, 1.7.6 due to insufficient es... |
| 9.8 | 2025-03-14 | CVE-2024-13321 | cve | The AnalyticsWP plugin for WordPress is vulnerable to SQL Injection via the 'custom_sql' parameter in all versions up to, and including, 2.0.0 due to insufficient auth... |
| 6.5 | 2025-03-14 | CVE-2024-13407 | cve | The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on w... |
| 5.4 | 2025-03-14 | CVE-2025-1526 | cve | The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget (countdown feature) in all versions up to, and i... |
| N/A | 2025-03-14 | CVE-2024-8176 | cve | A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nes... |
| 5.3 | 2025-03-14 | CVE-2025-1507 | cve | The ShareThis Dashboard for Google Analytics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_actions() fu... |
| N/A | 2025-03-14 | CVE-2024-26006 | cve | An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS version 7.4.3 and below, version 7.2.7 and below, version 7.0.13 and below and F... |
| Page(s) : 1 ... 104 105 106 107 108 109 110 111 112 113 [114] 115 116 117 118 119 120 121 122 123 124 ... | Result(s) : 312940 |
