Egidio Romano UNA CMS 14.0.0-RC - PHP Object Injection
webapps multiple

Calil Khalil Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE)
webapps multiple CVE-2019-15949

Al Baradi Joy WordPress User Registration & Membership Plugin 4.1.1 - Unauthenticated Privilege Escalation
webapps multiple

Al Baradi Joy XWiki Platform 15.10.10 - Remote Code Execution
webapps multiple CVE-2025-24893

Al Baradi Joy YesWiki 4.5.1 - Unauthenticated Path Traversal
webapps multiple CVE-2025-31131

Al Baradi Joy Apache Tomcat 11.0.3 - Remote Code Execution
webapps multiple CVE-2025-24813

Swammers8 WBCE CMS 1.6.3 - Authenticated Remote Code Execution (RCE)
webapps multiple

Suphawith Phusanbai Watcharr 1.43.0 - Remote Code Execution (RCE)
webapps multiple CVE-2024-48827

ByteHunter Palo Alto Networks Expedition 1.2.90.1 - Admin Account Takeover
webapps multiple CVE-2024-5910

4m3rr0r Royal Elementor Addons and Templates 1.3.78 - Unauthenticated Arbitrary File Upload
webapps multiple CVE-2023-5360

Al Baradi Joy Exclusive Addons for Elementor 2.6.9 - Stored Cross-Site Scripting (XSS)
webapps multiple CVE-2024-1234

4m3rr0r Kubio AI Page Builder 2.5.1 - Local File Inclusion (LFI)
webapps multiple CVE-2025-2294

kOaDT Next.js Middleware 15.2.2 - Authorization Bypass
webapps multiple CVE-2025-29927

Giulio Garzia IBM Security Verify Access 10.0.0 - Open Redirect during OAuth Flow
webapps multiple CVE-2024-35133

Ravindu Wickramasinghe Angular-Base64-Upload Library 0.1.20 - Remote Code Execution (RCE)
remote multiple CVE-2024-42640

Seth Kraft Nagios Log Server 2024R1.3.1 - Stored XSS
webapps multiple CVE-2025-29471