11
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in Johan Ström Background Control allows Path Traversal.This issue affects Background Control: from n/a through 1.0.5.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-22784
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
12
|
- |
|
-
|
-
|
Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects WR Price List Manager…
New
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2025-22782
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
13
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nativery Developer Nativery allows DOM-Based XSS.This issue affects Nativery: from n/a through 0.…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22781
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
14
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Yuzhakov wp-pano allows Stored XSS.This issue affects wp-pano: from n/a through 1.17.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22780
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
15
|
- |
|
-
|
-
|
Missing Authorization vulnerability in Ugur CELIK WP News Sliders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP News Sliders: from n/a through 1.0.
New
|
CWE-862
Missing Authorization
|
CVE-2025-22779
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
16
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lijit Networks Inc. and Crowd Favorite Lijit Search allows Reflected XSS.This issue affects Lijit…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22778
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
17
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jay Carter WP Bulletin Board allows Reflected XSS.This issue affects WP Bulletin Board: from n/a …
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22776
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
18
|
- |
|
-
|
-
|
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WPChill Htaccess File Editor allows Exploiting Incorrectly Configured Access Control Security Levels.T…
New
|
CWE-538
File and Directory Information Exposure
|
CVE-2025-22773
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
19
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7.
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22769
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
20
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Masoud Amini Zarinpal Paid Download allows Reflected XSS.This issue affects Zarinpal Paid Downloa…
New
|
CWE-79
Cross-site Scripting
|
CVE-2025-22766
|
2025-01-16 01:15 |
2025-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|