Complag <= 1.0.2 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

andru1 Complag

Wpik WordPress Basic Ajax Form <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

awanhrp Wpik WordPress Basic Ajax Form

Ayo Shortcodes <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute

ayothemes Ayo Shortcodes

WatchTowerHQ <= 3.15.0 - Authenticated (Administrator+) Arbitrary File Read via 'wht_download_big_object_origin' Parameter

watchtowerhq WatchTowerHQ

BuddyTask <= 1.3.0 - Missing Authorization to Authenticated (Subscriber+) Cross-Group Task Board Access and Manipulation

cytechltd BuddyTask

WP Job Portal <= 2.3.9 - Authenticated (Editor+) Stored Cross-Site Scripting via Job Description Field

wpjobportal WP Job Portal – AI-Powered Recruitment System for Company or Job Board website

Simple Nivo Slider <= 0.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

tmus Simple Nivo Slider

Vimeo SimpleGallery <= 0.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification

stiand Vimeo SimpleGallery

Flow-Flow Social Feed Stream 3.0.0 - 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via flow_flow_social_auth AJAX action

looks_awesome Flow-Flow Social Feed Stream

BMLT WordPress Plugin <= 3.11.4 - Cross-Site Request Forgery to Settings Creation and Deletion

magblogapi BMLT WordPress Plugin

A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

ASUSTOR ADM

High Level Synthesis Compiler Security Advisory

Altera High Level Synthesis Compiler intel high_level_synthesis_compiler

ASUSTOR ADM 安全漏洞

ASUSTOR ADM

High Level Synthesis Compiler Security Advisory

Altera High Level Synthesis Compiler intel high_level_synthesis_compiler

LT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter

cvedovini LT Unleashed

LJUsers <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'name' Shortcode Attribute

jenyay LJUsers

Quartus Prime Standard Security Advisory

Altera Quartus Prime Standard intel quartus_prime

H19Int15CallbackSmm: SMM memory corruption vulnerability in combined DXE/SMM (SMRAM write)

Insyde Software InsydeH2O

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a b...

malwarebytes malwarebytes

Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/pre...

nextcloud nextcloud_server