Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

wpforchurch Sermon Manager

dream gallery <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'dreampluginsmain' AJAX Action

teamdream dream gallery

Webcake – Landing Page Builder <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Settings Update

huyme Webcake – Landing Page Builder

Omnipress <= 1.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

omnipressteam Omnipress

CoSign Single Signon <= 0.3.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']

jiangxin CoSign Single Signon

FitVids for WordPress <= 4.0.1 - Authenticated (Admin+) Stored Cross-Site Scripting

kevindees FitVids for WordPress

ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update

contentstudio ContentStudio

CRM Memberships <= 2.5 - Missing Authorization to Unauthenticated 'ntzcrm_add_new_tag' AJAX Action

dripadmin CRM Memberships

SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure

wpeka-club SurveyFunnel – Survey Plugin for WordPress

CRM Memberships <= 2.5 - Missing Authorization to Privilege Escalation via Unauthenticated Password Reset in 'ntzcrm_changepassword' AJAX Endpoint

dripadmin CRM Memberships

Norby AI <= 1.0.3 - Cross-Site Request Forgery to Settings Update

jevgenisultanov Norby AI

SSP Debug <= 1.0.0 - Unauthenticated Sensitive Information Exposure

jimmyredline80 SSP Debug

SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

wpeka-club SurveyFunnel – Survey Plugin for WordPress

Demo Importer Plus <= 2.0.6 - Authenticated (Author+) Arbitrary File Upload via WXR Upload Bypass

kraftplugins Demo Importer Plus

OPPO ColorOS 安全漏洞

ColorOS ColorOS

Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode

wpdevelop Booking Calendar

Backup, Restore and Migrate your sites with XCloner <= 4.8.2 - Cross-Site Request Forgery in Xcloner_Remote_Storage:save()

watchful Backup, Restore and Migrate your sites with XCloner

Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) microsoft edge_chromium

youlaitech youlai-mall members getMemberById access control

youlaitech youlai-mall youlaitech youlai-mall +2个

In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from th...

CKSource CKFinder cksource ckfinder