CVE Alert: CVE-2024-12562
Vulnerability Summary: CVE-2024-12562 The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,...
Vulnerability Summary: CVE-2024-12562 The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,...
Vulnerability Summary: CVE-2025-1005 The ElementsKit Elementor addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image...
Vulnerability Summary: CVE-2024-13752 The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts...
Vulnerability Summary: CVE-2025-0935 The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a...
Vulnerability Summary: CVE-2024-10581 The DirectoryPress Frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,...
Vulnerability Summary: CVE-2024-13488 The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the...
Vulnerability Summary: CVE-2024-13834 The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress...
Vulnerability Summary: CVE-2024-13439 The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to...
Vulnerability Summary: CVE-2024-13500 The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts...
Vulnerability Summary: CVE-2025-0822 Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including,...
Vulnerability Summary: CVE-2025-24616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UIUX Lab Uix Page Builder...
Vulnerability Summary: CVE-2025-24614 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in agileLogix Post Timeline allows Reflected...
Vulnerability Summary: CVE-2025-24617 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP...
Vulnerability Summary: CVE-2025-24641 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rickonline_nl Better WishList API allows...
Vulnerability Summary: CVE-2025-24615 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fatcatapps Analytics Cat allows Reflected...
Vulnerability Summary: CVE-2025-24607 Missing Authorization vulnerability in Northern Beaches Websites IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels. This...
Vulnerability Summary: CVE-2025-24699 Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company WP Coder allows Cross-Site Scripting (XSS). This issue affects WP...
Vulnerability Summary: CVE-2025-24700 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WP Event Aggregator...
Vulnerability Summary: CVE-2025-24692 Missing Authorization vulnerability in Michael Revellin-Clerc Bulk Menu Edit allows Exploiting Incorrectly Configured Access Control Security Levels....
Vulnerability Summary: CVE-2024-12651 Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables.This issue...
Vulnerability Summary: CVE-2024-57725 An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the...
Vulnerability Summary: CVE-2024-56477 IBM Power Hardware Management Console V10.3.1050.0 could allow an authenticated user to traverse directories on the system....
Vulnerability Summary: CVE-2024-57778 An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via...
Vulnerability Summary: CVE-2024-52895 IBM i 7.4 and 7.5 is vulnerable to a database access denial of service caused by a...