Mercredi 30 septembre 2026

Yonyou U8 CRM

Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbitrary files via an unvalidated filePath parameter. Attackers can exploit this flaw to read sensitive files outside the web application directory, including configuration files containing database or service credentials. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14.

Magazine3 Schema & Structured Data for WP & AMP

Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

Greg – SiteOrigin Page Builder by SiteOrigin

Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions.

yii2-starter-kit

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the server.

ThemeHigh Extra Product Options For WooCommerce | Custom Product Addons and Fields

Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields <= 3.3.8 versions.

10Web Photo Gallery by 10Web

Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions.

AdithyaYelloju Restaurant-Management-System

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli_query of the file admin/table_booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AdithyaYelloju Restaurant-Management-System

A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_query of the file User/cancel.php of the component Order Cancellation. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

AdithyaYelloju Restaurant-Management-System

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

AdithyaYelloju Restaurant-Management-System

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Themefic Ultimate Addons for Contact Form 7

Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions.

keywordrush Content Egg

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

themifyme Themify Builder

Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions.

impleCode eCommerce Product Catalog

Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions.

weDevs WP ERP

Custom role PHP Object Injection in WP ERP <= 1.17.9 versions.

QuantumCloud Conversational Forms for ChatBot

Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.

Justin Nealey DesignSetGo

Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.

Mat Lipe Go Live Update Urls

Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions.

Nexcess Kadence WooCommerce Email Designer

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.

A WP Life Responsive Slider Gallery

Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions.

10Web Booster – Website speed optimization, Cache & Page Speed optimizer

Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions.

SEO Squirrly SEO Plugin by Squirrly SEO

Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.

WPFactory Cost of Goods for WooCommerce

Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.

Dotstore Minimum and Maximum Quantity for WooCommerce

Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.

codepeople Music Player for WooCommerce

Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.

baserCMS Users Community BcAddonMigrator

When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administrative user.

croixhaug Simply Schedule Appointments

The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6.12.27 via the 'ssa_locale' parameter parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included. Notably, exploitation does not require authentication in practice, as the locale filter is installed unconditionally on every request during plugins_loaded and the callback performs no nonce or capability check before returning the raw GET parameter value.

Unknown User Frontend

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is unavailable, and where a registration page has been configured. The administrator role cannot be obtained this way.

SourceCodester Car Driving School Management System

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

SourceCodester Online Reviewer Management System

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test_id results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

SourceCodester Online Reviewer Management System

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_functions.php. The manipulation of the argument access_code leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

SourceCodester Online Reviewer Management System

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.