HIGH
Unauthenticated Cross Site Request Forgery (CSRF) in FluentBooking Pro <= 2.2.4 versions.
Vulnerability intelligence
Tracked vulnerabilities
Published CVEs with severity, CVSS, affected vendors and products, exploitation status, remediation deadlines, and primary sources.
Matching records854
KEV additions · 7 days9
KEV additions · 30 days32
KEV due within 30 days0
MEDIUM
Editor Broken Access Control in FluentPlayer Pro <= 1.3.2 versions.
HIGH
Unauthenticated Cross Site Request Forgery (CSRF) in GeoDirectory <= 2.8.176 versions.
HIGH
Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.
HIGH
Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.
CRITICAL
Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.
HIGH
Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.
CRITICAL
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
CRITICAL
Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.
HIGH
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
HIGH
Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.
HIGH
Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.