Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects Wo...
Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions....
Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions....
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions....
Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions....
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions....
Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions....
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions....
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions....
Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions....
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions....
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions....
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions....
Unauthenticated SQL Injection in Participants Database <= 2.7.8.3 versions....
Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions....
Subscriber Broken Access Control in WP ERP <= 1.17.5 versions....
Unauthenticated Cross Site Scripting (XSS) in Easy Form Builder <= 4.0.12 versions....
Unauthenticated SQL Injection in Buddyboss Platform <= 3.0.5 versions....
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions....
Unauthenticated Cross Site Scripting (XSS) in Product Enquiry for WooCommerce <= 2.2.34.43 versions....
Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.34.0 versions....
Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in ApusListing <= 1.2.63 versions....
Unauthenticated Cross Site Request Forgery (CSRF) in Ninja Forms File Uploads Extension <= 3.3.26 versions....