All CVEs — page 309 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows remote code execution via WooCommerce Designer Pro <= 1.9.33, posing a critical risk to server security.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or manipulation.
This flaw allows SQL injection via subscriber input in WP2LEADS versions 3.5.7 and earlier, enabling attackers to execute arbitrary SQL commands and potentially gain full database access.
This flaw allows SQL injection attacks on subscriber data in versions of Paid Member Subscriptions up to 3.1.1, posing a high risk due to potential data compromise.
A sensitive data exposure vulnerability in SiteVault allows unauthenticated attackers to access backup, restore, migration, and cloning functionality without requiring authentication. This flaw enables unauthorized users to potentially extract confidential data from affected systems.
The flaw allows unauthenticated users to escalate privileges in the Salon booking system up to version 10.31.7, enabling unauthorized access and control over the system.
This flaw allows subscribers to escalate their privileges, potentially gaining full admin access, which can lead to data breaches and system compromise.
A PHP object injection vulnerability exists in Haaken versions up to 1.5 that allows unauthenticated attackers to inject malicious PHP objects, potentially leading to remote code execution or data compromise.
GiveWP versions 4.17.0 and earlier contain a privilege escalation flaw that allows unauthenticated users to gain administrative access to the WordPress site. This occurs due to improper privilege checks in the donation processing functionality.