CVE Vulnerability Catalog

PublishPress Series (WordPress plugin) through version 3.1.3 has an authorization bypass through user-controlled key vulnerability, allowing exploitation of incorrectly configured access control security levels.

WebSamurai (WordPress plugin) through version 1.0.7 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Airano MCP Bridge (WordPress plugin) through version 2.11.0 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Smart One Click Setup – Complete Demo Import & Export (WordPress plugin) through version 1.4.3 has a vulnerability of inserting sensitive information into sent data, allowing retrieval of embedded sensitive data.

onetwothreeneth HospitalManagementSystem (up to 9ef91ed6007314b6473110ed699dff76d158f61d) has a vulnerability in php/sessions.php where manipulation of the ID argument leads to improper authentication. Remote exploitation is possible and the exploit has been publicly disclosed.

onetwothreeneth HospitalManagementSystem has an unrestricted file upload vulnerability in the functions add_patient/add_physician/add_account/update_account/update_subaccount/edit_physician/edit_patient in the file php/controller.php. Manipulation of the img argument allows remote upload of malicious files.

A SQL injection vulnerability was discovered in CodeAstro Simple Loan Management System 1.0 in the file /admin/index.php, affecting the g_name argument. The attack can be performed remotely, and the exploit is publicly available.

Sapling SCM before version v0.2.20260929-102736 allows embedding control characters in Git subtree URLs. A maliciously constructed repository, if cloned, can trigger code execution during read-only operations such as sl log/blame/annotate.

xdg-dbus-proxy before version 0.1.9 has an incorrect implementation of message filtering that allows an attacker to bypass intended filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbitrary code execution outside its sandbox.

The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in versions up to and including 2.5.2.1. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary web scripts that execute when a user accesses the injected page.

The Paperwork software by GG Soft Software Services Inc. is vulnerable to SQL injection due to improper neutralization of special elements used in SQL commands. This issue affects Paperwork through 2026-09-09.

The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the `dmem_form_submit_handler()` function determining the new user's role by iterating all WordPress roles and calling `password_verify()` against an attacker-controlled bcrypt hash supplied in the `form_id` POST parameter, with no validation or whitelist of allowed roles. This makes it possible for unauthenticated attackers to register a new account with the administrator role by submitting a locally computed bcrypt hash of `administrator` as `form_id`, and when `auto_login=on` is submitted, be immediately authenticated as that administrator in the same request, resulting in full site takeover. Exploitation requires a WordPress nonce, but that nonce is publicly emitted on any page rendering the Divi Membership registration form and is therefore obtainable by any unauthenticated visitor.

A path-traversal vulnerability in the logback-classic module (Java) allows writing log files outside the intended directory when an MDC-based discriminator value (e.g., from an HTTP header) flows unsanitized into a nested FileAppender path. Affects versions from 0.9.14 through 1.6.4.

A SQL injection vulnerability was discovered in CodeAstro Simple Pharmacy Management System 1.0 in the file /SimplePharmacy-PHP/product/delete.php, affecting the ID argument. The attack can be performed remotely, and the exploit is publicly available.

A SQL injection vulnerability was discovered in CodeAstro Simple Pharmacy Management System 1.0 in the file /SimplePharmacy-PHP/product/view.php, affecting the ID argument. The attack can be performed remotely, and the exploit has been publicly disclosed.

Apache Thrift PHP bindings before version 0.25.0 are vulnerable to uncontrolled recursion, which can lead to system overload or crashes.

Apache Thrift Perl bindings before version 0.25.0 have an inefficient algorithmic complexity vulnerability, which can lead to excessive CPU or memory consumption.

Apache Thrift Perl bindings before version 0.25.0 have an uncaught exception vulnerability, which can lead to unexpected termination of the application.

Apache Thrift Ruby bindings before version 0.25.0 have an uncaught exception and improper handling of exceptional conditions vulnerability, which can lead to application crashes.

Apache Thrift Lua bindings before version 0.25.0 have an inefficient algorithmic complexity vulnerability, which can lead to excessive resource consumption.