Atomicorp WAF Research Notes

Research Update - 2026-07-03

Atomicorp WAF Research Notes document selected engineering observations, testing results, attack-pattern analysis, and WAF rule interactions.

The entries published in this update represent research notes produced during ongoing analysis activities.

These notes are not intended to represent the full set of vulnerabilities mitigated by Atomicorp products and should not be interpreted as a coverage matrix, certification list, or census of protected CVEs.

Atomicorp WAF protections are primarily designed around attack techniques and exploit behaviors rather than individual vulnerability identifiers. A published research note documents a positive research finding related to that CVE. If a CVE is absent from these notes, no conclusion should be drawn about protection status.

Presence means a positive research finding was published. Absence means no conclusion should be drawn.

CVE Notes Published in This Update

CVEVulnerability NameRules Observed
CVE-2015-9323404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection340017 , 380122
CVE-2021-42667Online Event Booking and Reservation System 2.3.0 - SQL Injection340016 , 340017 , 340144 , 340157 , 360147 , 360148
CVE-2022-27984Cuppa CMS v1.0 - SQL injection380026 , 380122
CVE-2022-27985Cuppa CMS v1.0 - SQL injection340017 , 341245
CVE-2022-29013Razer Sila Gaming Router - Remote Code Execution392301
CVE-2022-36446Webmin <1.997 - Authenticated Remote Code Execution392301
CVE-2022-44290WebTareas 2.4p5 - SQL Injection340016 , 340156 , 380026 , 380122
CVE-2022-44291WebTareas 2.4p5 - SQL Injection340016 , 340156 , 380026 , 380122
CVE-2022-45805WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection380122
CVE-2023-34751bloofoxCMS v0.5.2.1 - SQL Injection341245 , 380026 , 380122
CVE-2023-34752bloofoxCMS v0.5.2.1 - SQL Injection341245 , 380026 , 380122
CVE-2023-34753bloofoxCMS v0.5.2.1 - SQL Injection341245 , 380026 , 380122
CVE-2023-34754Bloofox v0.5.2.1 - SQL Injection341245 , 380026 , 380122
CVE-2023-34755bloofoxCMS v0.5.2.1 - SQL Injection380026 , 380122
CVE-2023-34756Bloofox v0.5.2.1 - SQL Injection380026 , 380122
CVE-2024-0986Issabel Authenticated - Remote Code Execution344362 , 344363
CVE-2025-1023ChurchCRM - SQL Injection340156 , 341145 , 341245 , 380026 , 380122
CVE-2023-34192Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2019-14530OpenEMR <5.0.2 - Local File Inclusion344360 , 347009 , 390709
CVE-2020-5776MAGMI - Cross-Site Request Forgery344364 , 344366 , 344370 , 345490
CVE-2021-24750WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection340016 , 340017 , 360147 , 360148
CVE-2021-25052WordPress Button Generator <2.3.3 - Remote File Inclusion340464 , 340465
CVE-2022-3142NEX-Forms Plugin < 7.9.7 - SQL Injection380122
CVE-2022-3768WordPress WPSmartContracts <1.3.12 - SQL Injection340016 , 380026 , 380122
CVE-2022-46443Bangresto - SQL Injection340016 , 340017 , 340157 , 341245 , 360147 , 360148
CVE-2023-0261WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection340016 , 380122
CVE-2023-0630Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection340016 , 340017 , 360147 , 360148 , 380122
CVE-2024-35584openSIS < 9.1 - SQL Injection340156 , 380122
CVE-2025-48157WordPress Formality Plugin <= 1.5.9 - Local File Inclusion344360 , 347009 , 382238 , 390709
CVE-2020-35749WordPress Simple Job Board <2.9.4 - Local File Inclusion340007 , 344360 , 347009 , 390709
CVE-2022-24264Cuppa CMS v1.0 - SQL injection340016 , 340017 , 340144 , 340157 , 340159 , 341245 , 360147 , 360148
CVE-2022-24265Cuppa CMS v1.0 - SQL injection341245 , 344370 , 380026 , 380122
CVE-2022-24266Cuppa CMS v1.0 - SQL injection341245 , 360147 , 360148 , 380026 , 380122
CVE-2016-10940WordPress zm-gallery plugin 1.0 SQL Injection340017 , 340156 , 340157
CVE-2021-24145WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload382238
CVE-2021-24554WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection380122
CVE-2021-24627G Auto-Hyperlink <= 1.0.1 - SQL Injection340017 , 340144 , 340157
CVE-2021-24786Download Monitor < 4.4.5 - SQL Injection380026 , 380122
CVE-2021-24791Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection380122
CVE-2021-24862WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection340016 , 380122
CVE-2022-0228Popup Builder < 4.0.7 - SQL Injection340017 , 380026 , 380122
CVE-2022-2219Unyson < 2.7.27 - Cross Site Scripting341266 , 346755
CVE-2022-32007Complete Online Job Search System 1.0 - SQL Injection340016 , 340017 , 340157 , 340159 , 360147 , 360148
CVE-2023-1408Video List Manager <= 1.7 - SQL Injection380122
CVE-2023-33439Faculty Evaluation System v1.0 - SQL Injection340157 , 340159 , 360147 , 360148
CVE-2015-4062WordPress NewStatPress 0.9.8 - SQL Injection341245 , 380122
CVE-2021-24947WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read344360 , 347009 , 390709
CVE-2021-29006rConfig 3.9.6 - Local File Inclusion344360 , 347009 , 390709
CVE-2021-40651OS4Ed OpenSIS Community 8.0 - Local File Inclusion340007 , 344360 , 347009 , 390709
CVE-2015-9312NewStatPress <=1.0.4 - Cross-Site Scripting340099 , 341099 , 346755 , 347198
CVE-2016-10973Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting346755 , 347198
CVE-2017-14622WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18487AdPush < 1.44 - Cross-Site Scripting341266 , 346755
CVE-2017-18490Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18491Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting341266 , 346755
CVE-2017-18492Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting341266 , 346755
CVE-2017-18493Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting341266 , 346755
CVE-2017-18494Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting341266 , 346755
CVE-2017-18496Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting341266 , 346755
CVE-2017-18500Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18501Social Login by BestWebSoft < 0.2 - Cross-Site Scripting341266 , 346755
CVE-2017-18502Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting341266 , 346755
CVE-2017-18505BestWebSoft's Twitter < 2.55 - Cross-Site Scripting341266 , 346755
CVE-2017-18516LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting341266 , 346755
CVE-2017-18517Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting341266 , 346755
CVE-2017-18518SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting341266 , 346755
CVE-2017-18527Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting341266 , 346755
CVE-2017-18528PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting341266 , 346755
CVE-2017-18529PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18530Rating by BestWebSoft < 0.2 - Cross-Site Scripting341266 , 346755
CVE-2017-18532Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting341266 , 346755
CVE-2017-18537Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting341266 , 346755
CVE-2017-18542Zendesk Help Center by BestWebSoft < 1.0.5 - Cross-Site Scripting341266 , 346755
CVE-2017-18556Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18557Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting341266 , 346755
CVE-2017-18558Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting341266 , 346755
CVE-2017-18562Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting341266 , 346755
CVE-2017-18564Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting341266 , 346755
CVE-2017-18565Updater by BestWebSoft < 1.35 - Cross-Site Scripting341266 , 346755
CVE-2017-18566User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting341266 , 346755
CVE-2018-19136DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 346755
CVE-2018-19137DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 346755
CVE-2018-19287WordPress Ninja Forms <3.3.18 - Cross-Site Scripting333141 , 340099 , 340148 , 341099 , 346755 , 347198
CVE-2019-14789Custom 404 Pro < 3.2.8 - Cross-Site Scripting346755 , 347198
CVE-2019-15811DomainMOD <=4.13.0 - Cross-Site Scripting333141 , 340149 , 341256 , 342259 , 346755
CVE-2020-13121Submitty <= 20.04.01 - Open Redirect340162 , 340163
CVE-2020-18268Z-Blog <=1.5.2 - Open Redirect390500 , 390501
CVE-2021-20792WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting341266 , 346755
CVE-2021-24169WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting341266 , 346755
CVE-2021-24300WordPress WooCommerce <1.13.22 - Cross-Site Scripting333141 , 340149 , 346755 , 347198
CVE-2021-24409Prismatic < 2.8 - Cross-Site Scripting346755 , 347198
CVE-2021-24436WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting341266 , 346755
CVE-2021-24488WordPress Post Grid <2.1.8 - Cross-Site Scripting333141 , 340149 , 346755 , 347198
CVE-2021-24510WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting341266 , 346755
CVE-2021-24875WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting333141 , 346755 , 347198
CVE-2021-24926WordPress Domain Check <1.0.17 - Cross-Site Scripting341266 , 346755
CVE-2021-24934Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting341266
CVE-2021-24940WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting346755 , 347198
CVE-2021-24956Blog2Social < 6.8.7 - Cross-Site Scripting341266 , 346755
CVE-2021-24979Paid Memberships Pro < 2.6.6 - Cross-Site Scripting346755 , 347198
CVE-2021-25008The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting346755 , 347198
CVE-2021-25055WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting340099 , 341099 , 346755 , 347198
CVE-2021-25063WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting346755 , 347198
CVE-2021-25078Affiliates Manager < 2.9.0 - Cross Site Scripting347198
CVE-2021-25079Contact Form Entries < 1.2.4 - Cross-Site Scripting341266 , 346755
CVE-2021-25104WordPress Ocean Extra <1.9.5 - Cross-Site Scripting340147 , 340148 , 341266 , 346755
CVE-2021-25112WordPress WHMCS Bridge <6.4b - Cross-Site Scripting346755 , 347198
CVE-2021-25120Easy Social Feed < 6.2.7 - Cross-Site Scripting341266 , 346755
CVE-2021-34640WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting341266 , 346755
CVE-2021-34643WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting341266 , 346755
CVE-2021-39320WordPress Under Construction <1.19 - Cross-Site Scripting341266 , 346755
CVE-2021-39322WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting341266 , 346755
CVE-2021-39350FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting341266 , 346755
CVE-2021-39411Hospital Management System 1.0 - Cross-Site Scripting340147 , 340148 , 342259 , 346755
CVE-2022-0147WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting346755 , 347198
CVE-2022-0149WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting341266 , 346755
CVE-2022-0206WordPress NewStatPress <1.3.6 - Cross-Site Scripting346755 , 347198
CVE-2022-0533Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting333141 , 346755 , 347198
CVE-2022-0599WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting346755 , 347198
CVE-2022-0864UpdraftPlus < 1.22.9 - Cross-Site Scripting341266 , 346755
CVE-2022-0899Header Footer Code Manager < 1.1.24 - Cross-Site Scripting341266 , 346755
CVE-2022-1007WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting341266 , 346755
CVE-2022-1756Newsletter < 7.4.5 - Cross-Site Scripting346755 , 347198
CVE-2022-1937WordPress Awin Data Feed <=1.6 - Cross-Site Scripting341266 , 346755
CVE-2022-2168WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting340148 , 341266 , 346755
CVE-2022-2599WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting341266 , 346755 , 347198
CVE-2022-2733Openemr < 7.0.0.1 - Cross-Site Scripting333140 , 333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350148
CVE-2022-29004Diary Management System 1.0 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755
CVE-2022-29005Online Birth Certificate System 1.2 - Stored Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2022-30513School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting392301
CVE-2022-30514School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting346755 , 392301
CVE-2022-3062Simple File List < 4.4.12 - Cross Site Scripting333141 , 346755 , 347198
CVE-2022-3578WordPress ProfileGrid <5.1.1 - Cross-Site Scripting341266 , 346755
CVE-2022-38295Cuppa CMS v1.0 - Cross Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2022-3908WordPress Helloprint <1.4.7 - Cross-Site Scripting341266 , 346755
CVE-2022-43014OpenCATS 0.9.6 - Cross-Site Scripting341266 , 346755
CVE-2022-43015OpenCATS 0.9.6 - Cross-Site Scripting341266
CVE-2022-43016OpenCATS 0.9.6 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350148
CVE-2022-43017OpenCATS 0.9.6 - Cross-Site Scripting341266 , 346755
CVE-2022-43018OpenCATS 0.9.6 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 346755
CVE-2022-4325WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting341266
CVE-2022-4897WordPress BackupBuddy <8.8.3 - Cross Site Scripting341266 , 346755 , 347198
CVE-2022-4971Sassy Social Share <= 3.3.3 - Cross-Site Scripting340099 , 341099 , 341258 , 346755 , 347198
CVE-2023-0099Simple URLs < 115 - Cross Site Scripting333141 , 340147 , 340148 , 341266 , 342259 , 346755 , 347198 , 350147 , 350148
CVE-2023-0236WordPress Tutor LMS <2.0.10 - Cross Site Scripting333141 , 341256 , 342259 , 346755 , 350147
CVE-2023-0602Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting341266 , 346755
CVE-2023-0676phpIPAM 1.5.1 - Cross-site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2023-0942WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting341266 , 346755 , 347198
CVE-2023-0948WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting341266 , 346755
CVE-2023-0968WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting346755 , 347198
CVE-2023-1080WordPress GN Publisher <1.5.6 - Cross-Site Scripting346755 , 347198
CVE-2023-1546MyCryptoCheckout < 2.124 - Cross-Site Scripting341266 , 346755
CVE-2023-1780Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting333141 , 346755 , 347198
CVE-2023-1835Ninja Forms < 3.6.22 - Cross-Site Scripting347198
CVE-2023-1890Tablesome < 1.0.9 - Cross-Site Scripting340148 , 341266
CVE-2023-2023Custom 404 Pro < 3.7.3 - Cross-Site Scripting346755 , 347198
CVE-2023-2122Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting340099 , 341099 , 346755 , 347198
CVE-2023-24657phpIPAM - 1.6 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2023-25346ChurchCRM 4.5.3 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2023-2624KiviCare WordPress Plugin - Cross-Site Scripting346755 , 347198
CVE-2023-2779Super Socializer < 7.13.52 - Cross-Site Scripting340099 , 341099 , 341258 , 346755 , 347198
CVE-2023-27922Newsletter < 7.6.9 - Cross-Site Scripting341266 , 346755
CVE-2023-29439FooGallery plugin <= 2.2.35 - Cross-Site Scripting340147 , 341266
CVE-2023-30777Advanced Custom Fields < 6.1.6 - Cross-Site Scripting333141 , 347198
CVE-2023-30868Tree Page View Plugin < 1.6.7 - Cross-Site Scripting341266
CVE-2023-34599Gibbon v25.0.0 - Cross-Site Scripting340147 , 340148 , 341256 , 341266 , 342259 , 346755 , 350147 , 350148
CVE-2023-37580Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting333141 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 346755 , 347198 , 350147 , 350148
CVE-2023-37988Contact Form Generator <= 2.5.5 - Cross-Site Scripting341266 , 346755
CVE-2023-3936Blog2Social < 7.2.1 - Cross-Site Scripting347198
CVE-2023-4148Ditty < 3.1.25 - Cross-Site Scripting340148 , 341266 , 346755
CVE-2023-44393Piwigo - Cross-Site Scripting341266 , 346755
CVE-2023-6697WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting340099 , 341099 , 346755 , 347198
CVE-2024-3469GP Premium <= 2.4.0 - Cross-Site Scripting341266 , 346755
CVE-2024-7313Shield Security Plugin < 20.0.6 - Cross-Site Scripting341266 , 346755
CVE-2025-1035KLog Server - Path Traversal340007 , 344360 , 347009 , 390709
CVE-2020-20988DomainMOD 4.13.0 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2021-25065Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting341266 , 346755 , 347198
CVE-2021-25067Landing Page Builder < 1.4.9.6 - Cross-Site Scripting333141 , 347198
CVE-2021-46005Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting340147 , 340148 , 342259 , 346755 , 350147 , 350148
CVE-2022-0148WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting346755 , 347198
CVE-2022-0928Microweber < 1.2.12 - Stored Cross-Site Scripting333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2022-0954Microweber <1.2.11 - Stored Cross-Site Scripting333141 , 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2022-3933WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting341266 , 346755
CVE-2022-3934WordPress FlatPM <3.0.13 - Cross-Site Scripting346755 , 347198
CVE-2022-4306WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting346755 , 350148
CVE-2023-26842ChurchCRM 4.5.3 - Cross-Site Scripting333141 , 340149 , 341256 , 342259 , 346755 , 350148
CVE-2023-26843ChurchCRM 4.5.3 - Cross-Site Scripting333141
CVE-2023-28665Woo Bulk Price Update <2.2.2 - Cross-Site Scripting347198
CVE-2023-31548ChurchCRM v4.5.3 - Cross-Site Scripting333141 , 340149 , 341256 , 342259 , 346755
CVE-2023-40753PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting341266
CVE-2018-1000856DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-19749DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-19751DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 342259 , 346755 , 350148
CVE-2018-19752DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-19892DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 342259 , 346755 , 350148
CVE-2018-19914DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 390585
CVE-2018-19915DomainMOD <=4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-20009DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-20010DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350148
CVE-2018-20011DomainMOD 4.11.01 - Cross-Site Scripting340147 , 340148 , 342259 , 346755 , 350148
CVE-2019-15829Gallery Photoblocks < 1.1.43 - Cross-Site Scripting346755 , 347198
CVE-2021-24991WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting347198
CVE-2021-46068Vehicle Service Management System - Stored Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2021-46069Vehicle Service Management System 1.0 - Stored Cross Site Scripting340147 , 340148 , 341256 , 342259 , 346755
CVE-2021-46071ehicle Service Management System 1.0 - Cross-Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2021-46072Vehicle Service Management System 1.0 - Stored Cross Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2021-46073Vehicle Service Management System 1.0 - Cross Site Scripting340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148
CVE-2024-11921Give WP Plugin < 3.19.0 - Cross-Site Scripting341266 , 346755
CVE-2021-42663Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting340147 , 341266 , 342259
CVE-2015-4063NewStatPress <0.9.9 - Cross-Site Scripting341266 , 346755
CVE-2023-2252Directorist < 7.5.4 - Local File Inclusion344360 , 347009 , 390709