SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection

Published 2025-11-02 by VulDB

SourceCodester Best House Rental Management System admin_class.php save_category sql injection

Published 2025-11-02 by VulDB

Tenda AC23 saveParentControlInfo buffer overflow

Published 2025-11-02 by VulDB

Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow

Published 2025-11-02 by VulDB

code-projects Simple Online Hotel Reservation System add_account.php sql injection

Published 2025-11-02 by VulDB

code-projects Simple Online Hotel Reservation System Photo edit_room.php unrestricted upload

Published 2025-11-02 by VulDB

/etc/timezone can be Arbitrarily Written

Published 2025-11-01 by azure-access

/etc/avahi/services/z9.service can be Arbitrarily Written

Published 2025-11-01 by azure-access

Denial of Service Due to SlowLoris

Published 2025-11-01 by azure-access

Web UI Malfunction

Published 2025-11-01 by azure-access

Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

Published 2025-11-01 by azure-access

IBM i is affected by a privilege escalation in IBM i SQL services

Published 2025-11-01 by ibm

Kallyas <= 4.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Kallyas <= 4.24.0 - Authenticated (Contributor+) Remote Code Execution

Published 2025-11-01 by Wordfence

Import WP – Export and Import CSV and XML files to WordPress <= 2.14.16 - Authenticated (Admin+) Arbitrary File Read

Published 2025-11-01 by Wordfence

RESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload

Published 2025-11-01 by Wordfence

Delicious Recipes <= 1.9.0 - Authenticated (Contributor+) Arbitrary File Upload

Published 2025-11-01 by Wordfence

Advanced Ads <= 2.0.12 - Unauthenticated Limited Code Execution

Published 2025-11-01 by Wordfence

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

Published 2025-11-01 by Wordfence

Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

Published 2025-11-01 by Wordfence

Schema & Structured Data for WP & AMP <= 1.51 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

wpForo Forum <= 2.4.9 - Authenticated (Susbscriber+) SQL Injection

Published 2025-11-01 by Wordfence

Folderly <= 0.3 - Incorrect Authorization to Authenticated (Author+) Term Deletion

Published 2025-11-01 by Wordfence

WP Discourse <= 2.5.9 - Authenticated (Author+) Information Exposure

Published 2025-11-01 by Wordfence

Employee Spotlight – Team Member Showcase & Meet the Team Plugin <= 5.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update

Published 2025-11-01 by Wordfence

Flying Images: Optimize and Lazy Load Images for Faster Page Speed <= 2.4.14 - Authenticated (Admin+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password

Published 2025-11-01 by Wordfence

Schema Scalpel <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in JSON-LD Schema

Published 2025-11-01 by Wordfence

Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

List category posts <= 0.92.0 - Authenticated (Contributor+) Information Exposure

Published 2025-11-01 by Wordfence

CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

SiteSEO – SEO Simplified <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update

Published 2025-11-01 by Wordfence

Post SMTP – Complete SMTP Solution with Logs, Alerts, Backup SMTP & Mobile App <= 3.6.0 - Missing Authorization to Account Takeover via Unauthenticated Email Log Disclosure

Published 2025-11-01 by Wordfence

Published 2025-11-01 by Liferay

Inactive Logout <= 3.5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Published 2025-11-01 by Wordfence

WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode

Published 2025-11-01 by Wordfence

Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure

Published 2025-11-01 by Wordfence

Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.5.1 - Missing Authorization to Unauthenticated API Disconnect

Published 2025-11-01 by Wordfence

Published 2025-10-31 by Liferay