741
|
- |
|
-
|
-
|
Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.8.5.
|
CWE-862
Missing Authorization
|
CVE-2025-22737
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
742
|
- |
|
-
|
-
|
Incorrect Privilege Assignment vulnerability in WPExperts User Management allows Privilege Escalation.This issue affects User Management: from n/a through 1.2.
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2025-22736
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
743
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Posts Footer Manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a …
|
CWE-79
Cross-site Scripting
|
CVE-2025-22734
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
744
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Build Private Store For Woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from …
|
CWE-352
Origin Validation Error
|
CVE-2025-22731
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
745
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Infomaniak Staff VOD Infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through 1.5.…
|
CWE-862
Missing Authorization
|
CVE-2025-22729
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
746
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Produ…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22724
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
747
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NCiphers SEO Bulk Editor allows Stored XSS.This issue affects SEO Bulk Editor: from n/a through 1…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22587
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
748
|
- |
|
-
|
-
|
Server-Side Request Forgery (SSRF) vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 throu…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2025-22346
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
749
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AGILELOGIX Free Google Maps allows Stored XSS.This issue affects Free Google Maps: from n/a throu…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22329
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
750
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in galleryape Photo Gallery – Image Gallery by Ape allows Reflected XSS.This issue affects Photo Gal…
|
CWE-79
Cross-site Scripting
|
CVE-2025-22317
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|