VulnCheck

Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Route

Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Reset

Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template

LearnPress WordPress Plugin < 4.4.6 Stored XSS via Quiz Question Answer Titles

LearnPress WordPress Plugin < 4.4.6 Broken Object-Level Authorization via Quiz Answer Insert

Pangolin < 1.22.0 Authentication Bypass via Share-Link Endpoint

ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE

Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler

GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler