CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- online payment hub project payment hubSQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23,...9.8 Critical
- try my recipe project my recipeSQL injection in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) 1.0 by oretnom23,...9.8 Critical
- try my recipe project my recipeCross Site Scripting (XSS) in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) by...6.1 Medium
- teamviewerThis vulnerability allows local attackers to disclose sensitive information on affected...3.3 Low
- teslamateTeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open...9.8 Critical
- online covid vaccination scheduler system project covid vaccination scheduler systemCross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler...6.1 Medium
- the electric billing management system project electric billing management systemCross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by...6.1 Medium
- patient appointment scheduler system project appointment scheduler systemSQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by...9.8 Critical
- oretnom23 banking systemSQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to...9.8 Critical
- student quarterly grading system project quarterly grading systemCross Site Scripting (XSS) in Sourcecodester Student Quarterly Grading System by oretnom23,...5.4 Medium
- mcafee data loss prevention, mcafee,llc mcafee data loss prevention (dlp) epo extension +1 moreBlind SQL injection in DLP ePO extension8.4 High
- simple membership system using php and ajax project membership system using php and ajaxSQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows...9.8 Critical
- south gate inn online reservation system project gate inn online reservation systemSQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by...9.8 Critical
- php crud without refresh\/reload using ajax and datatables tutorial project crud without refresh\/reload using ajax and datatables tutorialCross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using...9.6 Critical
- purchase order management system project order management systemSQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by...9.8 Critical
- storage unit rental management system project unit rental management systemSQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by...9.8 Critical
- oretnom23 online learning systemSQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23...9.8 Critical
- hospital\'s patient records management system project patient records management systemSourcecodester Hospital's Patient Records Management System 1.0 is vulnerable to Insecure...5.3 Medium
- quickboxIn QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter...8.8 High
qcellcrates.ioA malicious coder can get unsound access to TCell or TLCell memoryNo score- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm8.0 High
- roundupwp registrations for the events calendar, unknown registrations for the events calendar – event registration plugin +1 moreRegistrations for the Events Calendar < 2.7.10 - Reflected Cross-Site Scripting6.1 Medium
- crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 moreContact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 moreContact Form Entries < 1.2.4 - Reflected Cross-Site Scripting6.1 Medium
- mra13 affiliates managerAffiliates Manager < 2.9.0 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- wedevs wp user frontend, unknown wp user frontend – membership, profile, registration & post submission plugin for wordpress +1 moreWP User Frontend < 3.5.26 - SQL Injection to Reflected Cross-Site Scripting8.8 High
- webp converter for media project converter for media, unknown webp converter for media – convert webp and avif & optimize images +1 moreWebP Converter for Media < 4.0.3 - Unauthenticated Open redirect6.1 Medium
- unknown wp125WP125 < 1.5.5 - Arbitrary Ad Deletion via CSRF8.8 High
- unknown orders tracking for woocommerceOrders Tracking for WooCommerce < 1.1.10 - Reflected Cross-Site Scripting6.1 Medium
- mobileeventsmanager mobile events managerMobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- asgaros forum, unknown asgaros forum +1 moreAsgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_id7.2 High
- revmakx backup and staging by wp time capsuleBackup and Staging by WP Time Capsule < 1.22.7 - Reflected Cross-Site Scripting6.1 Medium
- biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier), oxilab image hover effects ultimate +1 moreImage Hover Effects Ultimate < 9.7.1 - Reflected Cross-Site Scripting6.1 Medium
- stellarwp event ticketsEvent Tickets < 5.2.2 - Open Redirect6.1 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 1.9.12 - Reflected Cross-Site Scripting6.1 Medium
- mycred, mycred – points, rewards, gamification, ranks, badges & loyalty plugin, unknown mycred – points, rewards, gamification, ranks, badges & loyalty plugin +2 moremyCred < 2.4 - Reflected Cross-Site Scripting6.1 Medium
- themeum qubely, qubely – advanced gutenberg blocks +1 moreQubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion6.5 Medium
- codesnippets code snippetsCode Snippets < 2.14.3 - Reflected Cross-Site Scripting6.1 Medium
- scott paterson accept donations with paypalAccept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRF6.5 Medium
- unknown easy forms for mailchimpEasy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting6.1 Medium
- wbolt smart seo tool, unknown smart seo tool – seo优化插件 +1 moreSmart SEO Tool < 3.0.6 - Reflected Cross-Site Scripting6.1 Medium
- adtribes product feed pro for woocommerceProduct Feed PRO for WooCommerce < 11.0.7 - Subscriber+ Settings Update to Stored XSS5.4 Medium
- etoilewebdesign ultimate faq, unknown ultimate faq – wordpress faq and accordion plugin +1 moreUltimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ Creation5.7 Medium
- fivestarplugins five star restaurant reservations, rustaurius five star restaurant reservations – wordpress booking plugin +1 moreFive Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- unknown wp extra file types, wp extra file types project extra file types +1 moreWP Extra File Types < 0.5.1 - CSRF to Stored Cross-Site Scripting8.0 High
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS6.1 Medium
- unknown protect wp adminProtect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation7.5 High
- hwk-fr advanced custom fields: extended, acf-extended advanced custom fields\ +1 moreAdvanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection7.2 High
- accesspressthemes wp cookie user info, accesspress themes cookie notification plugin for wordpress – wp cookie user info +1 moreWP Cookie User Info < 1.0.9 - Admin+ SQL Injection7.2 High
- unknown wp post page clone, wp post page clone project post page clone +1 moreWP Post Page Clone < 1.2 - Unauthorised Post Access4.3 Medium
- Show moreLoading…