Vulnerabilities > Improper Control of Generation of Code ('Code Injection')

DATE CVE VULNERABILITY TITLE RISK
2025-02-07 CVE-2024-7425 Code Injection vulnerability in Soflyy WP ALL Export 1.7.9/1.8.6
The WP ALL Export Pro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to improper user input validation and sanitization in all versions up to, and including, 1.9.1.
network
low complexity
soflyy CWE-94
7.2
2025-02-07 CVE-2024-7419 Code Injection vulnerability in Soflyy WP ALL Export 1.7.9/1.8.6
The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields.
network
low complexity
soflyy CWE-94
8.8
2025-02-07 CVE-2025-1085 A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03.
network
low complexity
CWE-94
4.3
2025-02-06 CVE-2025-1082 A vulnerability classified as problematic has been found in Mindskip xzs-mysql ????????? 3.9.0.
network
low complexity
CWE-94
3.5
2025-02-03 CVE-2025-0971 A vulnerability was found in Zenvia Movidesk up to 25.01.22.
network
low complexity
CWE-94
3.5
2025-02-03 CVE-2025-0972 A vulnerability classified as problematic has been found in Zenvia Movidesk up to 25.01.22.
network
low complexity
CWE-94
3.5
2025-01-31 CVE-2024-13472 Code Injection vulnerability in Wcproducttable Woocommerce Product Table
The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.9.4.
network
low complexity
wcproducttable CWE-94
7.3
2025-01-30 CVE-2025-0871 A vulnerability classified as problematic has been found in Maybecms 1.2.
network
low complexity
CWE-94
3.5
2025-01-30 CVE-2024-11600 Code Injection vulnerability in Visualmodo Borderless
The Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.9 via the 'write_config' function.
network
low complexity
visualmodo CWE-94
7.2
2025-01-29 CVE-2025-0806 Code Injection vulnerability in Anisha JOB Recruitment 1.0
A vulnerability was found in code-projects Job Recruitment 1.0.
network
low complexity
anisha CWE-94
6.1