1681
|
- |
|
-
|
-
|
Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Smallerik File Browser allows Upload a Web Shell to a Web Server. This issue affects Smallerik File Browser: from n/a through…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2025-23918
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1682
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Menus Plus+ allows SQL Injection. This issue affects Menus Plus+: from n/a through 1.9.6.
|
CWE-89
SQL Injection
|
CVE-2025-23910
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1683
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Download Codes allows Reflected XSS. This issue affects WP Download Codes: from n/a t…
|
CWE-79
Cross-site Scripting
|
CVE-2025-23882
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1684
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Block Pack allows Reflected XSS. This issue affects WP Block Pack: from n/a through 1…
|
CWE-79
Cross-site Scripting
|
CVE-2025-23874
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1685
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WordPress File Search allows Reflected XSS. This issue affects WordPress File Search: fr…
|
CWE-79
Cross-site Scripting
|
CVE-2025-23867
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1686
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound EU DSGVO Helper allows Reflected XSS. This issue affects EU DSGVO Helper: from n/a throu…
|
CWE-79
Cross-site Scripting
|
CVE-2025-23866
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1687
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kolja Nolte Flexible Blogtitle allows Reflected XSS. This issue affects Flexible Blogtitle: from …
|
CWE-79
Cross-site Scripting
|
CVE-2025-23846
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1688
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Contact Form 7 Round Robin Lead Distribution allows Reflected XSS. This issue affects Co…
|
CWE-79
Cross-site Scripting
|
CVE-2025-23812
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1689
|
- |
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP2APP allows Reflected XSS. This issue affects WP2APP: from n/a through 2.6.2.
|
CWE-79
Cross-site Scripting
|
CVE-2025-23811
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1690
|
- |
|
-
|
-
|
Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe allows Reflected XSS. This issue affects Ultimate Subscribe: from n/a through 1.3.
|
CWE-352
Origin Validation Error
|
CVE-2025-23806
|
2025-01-23 00:15 |
2025-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|