Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Contributor Local File Inclusion in Vino <= 1.9 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1....
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions....
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions....
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions....
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions....
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2....
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions....
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions....
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions....
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions....
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions....
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions....
Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions....
Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions....
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions....
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions....
Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions....
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions....
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylan...
Subscriber Broken Access Control in ะฎKassa ะดะปั WooCommerce <= 2.16.1 versions....