VYPR

CVEs

8,988 total · page 109 of 180

AllCriticalHighKEV
  • CVE-2023-52182CriDec 31, 2023
    Ari Soft
    Ari Stream Quiz
    risk 0.64cvss 9.9epss 0.00

    Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0.

  • CVE-2023-52181CriDec 31, 2023
    Presslabs
    Theme Per User
    risk 0.65cvss 10.0epss 0.00

    Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1.

  • CVE-2023-39157CriDec 31, 2023
    Crocoblock
    Jetelements
    risk 0.59cvss 9.0epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetElements For Elementor.This issue affects JetElements For Elementor: from n/a through 2.6.10.

  • CVE-2023-4675CriDec 29, 2023
    GM Information Technologies
    MDO
    risk 0.64cvss 9.8epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection. This issue affects MDO: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not…

  • CVE-2023-4541CriDec 29, 2023
    Hedef Tracking
    Admin Panel
    risk 0.64cvss 9.8epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not…

  • CVE-2023-51475CriDec 29, 2023
    WordPress
    WP MLM SOFTWARE PLUGIN
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

  • CVE-2023-51473CriDec 29, 2023
    Pixelemu
    Terraclassifieds
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Pixelemu TerraClassifieds – Simple Classifieds Plugin.This issue affects TerraClassifieds – Simple Classifieds Plugin: from n/a through 2.0.3.

  • CVE-2023-51468CriDec 29, 2023
    WordPress
    Rencontre
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.

  • CVE-2023-51421CriDec 29, 2023
    Soft8soft
    Verge3d
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

  • CVE-2023-51419CriDec 29, 2023
    Bertha
    Bertha AI
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue affects BERTHA AI. Your AI co-pilot for WordPress and Chrome: from n/a through 1.11.10.7.

  • CVE-2023-51417CriDec 29, 2023
    Jorisvm
    Jvm Gutenberg Rich Text Icons
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3.

  • CVE-2023-51412CriDec 29, 2023
    Piotnet
    Piotnet Forms
    risk 0.59cvss 9.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

  • CVE-2023-51411CriDec 29, 2023
    Dynamiapps
    Frontend Admin
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3.

  • CVE-2023-51410CriDec 29, 2023
    Wpvibes
    Wp Mail Log
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2.

  • CVE-2023-51545CriDec 29, 2023
    Themehigh
    Job Manager \& Career
    risk 0.62cvss 9.6epss 0.00

    Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4.

  • CVE-2023-51505CriDec 29, 2023
    Realmag777
    Active Products Tables for WooCommerce
    risk 0.65cvss 10.0epss 0.01

    Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a…

  • CVE-2023-51470CriDec 29, 2023
    Boiteasite
    Rencontre
    risk 0.64cvss 9.9epss 0.01

    Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.11.1.

  • CVE-2023-51422CriDec 29, 2023
    Saleswonder
    Webinarignition
    risk 0.64cvss 9.9epss 0.01

    Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom…

  • CVE-2023-51414CriDec 29, 2023
    Donweb
    Envialosimple
    risk 0.62cvss 9.6epss 0.01

    Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.

  • CVE-2023-51420CriDec 29, 2023
    Soft8soft
    Verge3d
    risk 0.59cvss 9.1epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

  • CVE-2023-49830CriDec 29, 2023
    Brainstormforce
    Astra
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.

  • CVE-2023-47840CriDec 29, 2023
    Qodeinteractive
    Qode Essential Addons
    risk 0.66cvss 9.9epss 0.21

    Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.

  • CVE-2023-46623CriDec 29, 2023
    Wpvnteam
    Wp Extra
    risk 0.64cvss 9.9epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2.

  • CVE-2023-45751CriDec 29, 2023
    Posimyth
    Nexter Extension
    risk 0.59cvss 9.1epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3.

  • CVE-2023-40606CriDec 29, 2023
    Kanban For Wordpress
    Kanban Boards For Wordpress
    risk 0.59cvss 9.1epss 0.00

    Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.

  • CVE-2023-32095CriDec 29, 2023
    Milandinic
    Rename Media Files
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1.

  • CVE-2023-25054CriDec 29, 2023
    Carrcommunications
    Rsvpmaker
    risk 0.65cvss 10.0epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6.

  • CVE-2023-50839CriDec 28, 2023
    Joomsky
    Js Help Desk
    risk 0.62cvss 9.3epss 0.16

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.

  • CVE-2023-4671CriDec 28, 2023
    Talent Software
    ECOP
    risk 0.64cvss 9.8epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

  • CVE-2023-6190CriDec 27, 2023
    Izmir Katip Celebi University
    University Information Management System
    risk 0.64cvss 9.8epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before…

  • CVE-2023-6972CriDec 23, 2023
    WordPress
    Backup Migration
    risk 0.58cvss 9.8epss 0.18

    The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-name', 'content-manifest', or 'content-bmitmp' and 'content-identy' HTTP headers. This makes it possible for…

  • CVE-2023-6145CriDec 21, 2023
    İstanbul Soft Informatics and Consultancy Limited Company
    Softomi Advanced C2C Marketplace Software
    risk 0.64cvss 9.8epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace…

  • CVE-2023-49778CriDec 21, 2023
    Dmry
    Sayfa Sayac
    risk 0.65cvss 10.0epss 0.01

    Deserialization of Untrusted Data vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6.

  • CVE-2023-25970CriDec 20, 2023
    Zendrop
    Zendrop
    risk 0.64cvss 9.8epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Zendrop Zendrop – Global Dropshipping.This issue affects Zendrop – Global Dropshipping: from n/a through 1.0.0.

  • CVE-2023-49814CriDec 20, 2023
    Symbiostock
    Symbiostock
    risk 0.59cvss 9.1epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Symbiostock symbiostock.This issue affects Symbiostock: from n/a through 6.0.0.

  • CVE-2023-46149CriDec 20, 2023
    Themify
    Ultra
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Ultra.This issue affects Themify Ultra: from n/a through 7.3.5.

  • CVE-2023-45603CriDec 20, 2023
    Plugin Planet
    User Submitted Posts
    risk 0.59cvss 9.0epss 0.02

    Unrestricted Upload of File with Dangerous Type vulnerability in Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End.This issue affects User Submitted Posts – Enable Users to Submit Posts from the Front End: from n/a through 20230902.

  • CVE-2023-40204CriDec 20, 2023
    Premio
    Folders
    risk 0.59cvss 9.1epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from…

  • CVE-2023-34385CriDec 20, 2023
    Akshaymenariya
    Export Import Menus
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Akshay Menariya Export Import Menus.This issue affects Export Import Menus: from n/a through 1.8.0.

  • CVE-2023-34007CriDec 20, 2023
    Wpchill
    Download Monitor
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.3.

  • CVE-2023-33318CriDec 20, 2023
    WooCommerce
    Automatewoo
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in WooCommerce AutomateWoo.This issue affects AutomateWoo: from n/a through 4.9.40.

  • CVE-2023-31231CriDec 20, 2023
    Unlimited Elements
    Unlimited Elements For Elementor
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates).This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 1.5.65.

  • CVE-2023-31215CriDec 20, 2023
    Amadercode
    Dropshipping \& Affiliation With Amazon
    risk 0.64cvss 9.9epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in AmaderCode Lab Dropshipping & Affiliation with Amazon.This issue affects Dropshipping & Affiliation with Amazon: from n/a through 2.1.2.

  • CVE-2023-29384CriDec 20, 2023
    WordPress
    Jobwp
    risk 0.65cvss 10.0epss 0.04

    Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.

  • CVE-2023-29102CriDec 20, 2023
    Olivethemes
    Olive One Click Demo Import
    risk 0.59cvss 9.1epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Olive Themes Olive One Click Demo Import.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.

  • CVE-2023-28170CriDec 20, 2023
    Themely
    Theme Demo Import
    risk 0.59cvss 9.1epss 0.00

    Unrestricted Upload of File with Dangerous Type vulnerability in Themely Theme Demo Import.This issue affects Theme Demo Import: from n/a through 1.1.1.

  • CVE-2023-49752CriDec 20, 2023
    Spoonthemes
    Adifier
    risk 0.60cvss 9.3epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.This issue affects Adifier - Classified Ads WordPress Theme: from n/a before 3.1.4.

  • CVE-2023-49776CriDec 20, 2023
    Dmry
    Sayfa Sayac
    risk 0.60cvss 9.3epss 0.00

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6.

  • CVE-2023-49773CriDec 20, 2023
    Bcorp Shortcodes Project
    Bcorp Shortcodes
    risk 0.65cvss 10.0epss 0.00

    Deserialization of Untrusted Data vulnerability in Tim Brattberg BCorp Shortcodes.This issue affects BCorp Shortcodes: from n/a through 0.23.

  • CVE-2023-49772CriDec 20, 2023
    Phpbits
    Genesis Simple Love
    risk 0.65cvss 10.0epss 0.00

    Deserialization of Untrusted Data vulnerability in Phpbits Creative Studio Genesis Simple Love.This issue affects Genesis Simple Love: from n/a through 2.0.