Vulnerabilities > Improper Control of Generation of Code ('Code Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-04-24 CVE-2025-3776 The Verification SMS with TargetSMS plugin for WordPress is vulnerable to limited Remote Code Execution in all versions up to, and including, 1.5 via the 'targetvr_ajax_handler' function.
network
low complexity
CWE-94
8.3
8.3
2025-04-22 CVE-2025-3472 The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.6.
network
low complexity
CWE-94
6.5
6.5
2025-04-20 CVE-2025-3826 A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
CWE-94
2.4
2.4
2025-04-20 CVE-2025-3825 A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
CWE-94
2.4
2.4
2025-04-20 CVE-2025-3823 A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
CWE-94
2.4
2.4
2025-04-20 CVE-2025-3824 A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
CWE-94
2.4
2.4
2025-04-20 CVE-2025-3822 Code Injection vulnerability in Senior-Walter Web-Based Pharmacy Product Management System 1.0
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
senior-walter CWE-94
5.4
5.4
2025-04-20 CVE-2025-3821 Code Injection vulnerability in Senior-Walter Web-Based Pharmacy Product Management System 1.0
A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.
network
low complexity
senior-walter CWE-94
5.4
5.4
2025-04-19 CVE-2025-3806 A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3.
network
low complexity
CWE-94
2.4
2.4
2025-04-18 CVE-2025-3789 A vulnerability was found in baseweb JSite 1.0.
network
low complexity
CWE-94
3.5
3.5