41
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Multiple Carousel allows SQL Injection. This issue affects Multiple Carousel: from n/a t…
New
|
CWE-89
SQL Injection
|
CVE-2025-22553
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
42
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Private Messages for UserPro allows Reflected XSS. This issue affects Private Messages f…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22322
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
43
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Eniture Technology Standard Box Sizes – for WooCommerce. This issue affects Standard Box Sizes – for WooCommerce: from n/a through 1.6.13.
New
|
CWE-862
Missing Authorization
|
CVE-2025-22318
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
44
|
- |
|
-
|
-
|
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NotFound Private Messages for UserPro. This issue affects Private Messages for…
New
|
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
|
CVE-2025-22311
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
45
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Bonjour Bar allows Stored XSS. This issue affects Bonjour Bar: from n/a through 1.0.0.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22262
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
46
|
- |
|
-
|
-
|
Improper Encoding or Escaping of Output vulnerability in Poll Maker Team Poll Maker. This issue affects Poll Maker: from n/a through n/a.
New
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2024-56277
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
47
|
- |
|
-
|
-
|
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3.
New
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2024-51919
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
48
|
- |
|
-
|
-
|
Incorrect Privilege Assignment vulnerability in NotFound Homey Login Register allows Privilege Escalation. This issue affects Homey Login Register: from n/a through 2.4.0.
New
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2024-51888
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
49
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.…
New
|
CWE-89
SQL Injection
|
CVE-2024-51818
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
50
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound ARPrice allows Reflected XSS. This issue affects ARPrice: from n/a through 4.0.3.
New
|
CWE-79
Cross-site Scripting
|
CVE-2024-49700
|
2025-01-21 23:15 |
2025-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|