Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.
Unauthenticated Broken Access Control in Passster <= 4.3.13 versions.
Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.
Contributor Cross Site Scripting (XSS) in Simple Payment <= 2.5.4 versions.
Contributor Cross Site Scripting (XSS) in Bold Page Builder <= 5.9.9 versions.
Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions.
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.