Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2025-03-07 CVE-2024-13320 The CURCY - WooCommerce Multi Currency - Currency Switcher plugin for WordPress is vulnerable to SQL Injection via the 'wc_filter_price_meta[where]' parameter in all versions up to, and including, 2.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.
network
low complexity
CWE-89
7.5
7.5
2025-03-07 CVE-2024-13655 The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callback() function in all versions up to, and including, 3.5.2.
network
low complexity
CWE-862
8.1
8.1
2025-03-07 CVE-2025-2066 A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2067 A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2062 A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2063 A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2064 A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2065 A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-2060 A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0.
network
low complexity
CWE-74
7.3
7.3
2025-03-07 CVE-2025-0749 The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3.
network
high complexity
CWE-288
8.1
8.1