Linux kernel 安全漏洞

Linux Linux Linux Linux

Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

Sangfor Operation and Maintenance Security Management System sangfor operation_and_maintenance_security_management_system

70mai X200 Init Script file inclusion

70mai X200 70mai x200_firmware

aaPanel BaoTa Backend database sql injection

aaPanel BaoTa aaPanel BaoTa +2个

code-projects Responsive Hotel Site roomdel.php sql injection

code-projects Responsive Hotel Site fabian responsive_hotel_site

Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload

alexreservations Alex Reservations: Smart Restaurant Booking

Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload

getwpfunnels Mail Mint – Newsletters, Email Marketing, Automation, WooCommerce Emails, Post Notification, and more

Gallery Plugin for WordPress – Envira Photo Gallery <= 1.11.0 - Missing Authorization to Authenticated (Contributor+) Gallery Conversion

smub Gallery Plugin for WordPress – Envira Photo Gallery

aThemes Addons for Elementor <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget

smub aThemes Addons for Elementor

Saphali LiqPay for donate <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

saphali Saphali LiqPay for donate

Quick Featured Images <= 13.7.3 - Authenticated (Editor+) SQL Injection via delete_orphaned

kybernetikservices Quick Featured Images

CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion

gregross CYAN Backup

Academy LMS Pro <= 3.3.8 - Unauthenticated Sensitive Information Exposure via 'enqueue_social_login_script'

academylms Academy LMS Pro

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'

academylms Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

Flexible Refund and Return Order for WooCommerce <= 1.0.42 - Incorrect Authorization to Authenticated (Contributor+) Refund Status Update

wpdesk Flexible Refund and Return Order for WooCommerce

EventPrime – Events Calendar, Bookings and Tickets <= 4.2.0.0 - Missing Authorization to Authenticated (Subscriber+) Booking Note Creation

metagauss EventPrime – Events Calendar, Bookings and Tickets

Better Find and Replace <= 1.7.7 - Authenticated (Subscriber+) Limited Code Injection

codesolz Better Find and Replace – AI-Powered Suggestions

HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting

linksoftware HTML Forms – Simple WordPress Forms Plugin

Insert Headers and Footers Code – HT Script <= 1.1.6 - Authenticated (Author+) Stored Cross-Site Scripting

htplugins Insert Headers and Footers Code – HT Script

WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal

getwpfunnels Easy WordPress Funnel Builder To Collect Leads And Increase Sales – WPFunnels