CVEs we hold for All
Records whose assigning authority named All as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-88994All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block AttributesUnknown All Bootstrap Blocks
CVE-2026-88993All Bootstrap Blocks <= 1.3.31 - Contributor+ Stored XSS via areoi/button type AttributeUnknown All Bootstrap Blocks
CVE-2026-85576All in One Files Upload for WooCommerce < 2.0.17 - Subscriber+ Arbitrary Plugin Settings UpdateUnknown All in One Files Upload
CVE-2026-85573All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG UploadUnknown All in One Files Upload
CVE-2026-82884All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant BlockUnknown All in One SEO
CVE-2026-81810All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key…Unknown All-in-One WP Migration and Backup
CVE-2026-79787Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signaturealluxio
CVE-2026-55847Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace renderingallure-framework allure2; io.qameta.allure allure-generator
CVE-2026-55846Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Readallure-framework allure2
CVE-2026-55777GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoSallinurl goaccess
CVE-2026-55768GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication…allinurl goaccess
CVE-2026-33166Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest…allure-framework allure2
CVE-2026-19856All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search QueryUnknown All in One SEO
CVE-2026-19827alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversalalldatacenter alldata
CVE-2026-19826alldatacenter alldata xxl-rpc Listener HessianSerializer.java Hessian2Input.readObject deserializationalldatacenter alldata
CVE-2026-19775OpenStation <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via AI…allterraindeveloper OpenStation: Desktop Windows, Dock &…
CVE-2026-19075All-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterUnknown All-in-One Video Gallery
CVE-2026-17533All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST ImportUnknown All-in-One WP Migration and Backup
CVE-2026-16211allegro Hostname Allocation assets.py AssetLastHostname.increment_hostname race conditionn/a allegro
CVE-2026-12898All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path TraversalUnknown All-in-One WP Migration and Backup
CVE-2026-11443Allegra downloadAttachment Cross-Site Scripting Authentication Bypass VulnerabilityAllegra
CVE-2026-111683Allegro Ralph through 20260902.1 Missing Authorization in Data Center Rack APIallegro ralph
CVE-2026-111613AllData through 0.7.1 Unauthenticated JDBC Injection via /jobJdbcDatasource/testalldatacenter alldata
CVE-2026-10755All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI IntegrationUnknown All in One SEO
CVE-2025-6216Allegra calculateTokenExpDate Password Recovery Authentication Bypass VulnerabilityAllegra
CVE-2025-60075WordPress hpb seo plugin for WordPress plugin <= 3.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityAllegro Marketing hpb seo plugin for WordPress
CVE-2025-54733WordPress All Bootstrap Blocks Plugin <= 1.3.28 - Broken Access Control Vulnerabilityall_bootstrap_blocks All Bootstrap Blocks
CVE-2025-52888Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restrictionallure-framework allure2
CVE-2025-3486Allegra isZipEntryValide Directory Traversal Remote Code Execution VulnerabilityAllegra
CVE-2025-3485Allegra extractFileFromZip Directory Traversal Remote Code Execution VulnerabilityAllegra
CVE-2025-26930WordPress Home Services plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityalleythemes Home Services
CVE-2025-2478Code Clone <= 0.9 - Authenticated (Administrator+) SQL Injection via snippetId Parameterallhart Code Clone
CVE-2025-11466Allegra DatabaseBackupBL Directory Traversal Information Disclosure VulnerabilityAllegra
CVE-2024-5884Beauty <= 1.1.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via tpl_featured_cat_id Parameterallprices Beauty
CVE-2024-5580Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution VulnerabilityAllegra
CVE-2024-5579Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution VulnerabilityAllegra
CVE-2024-53824WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerabilityall_bootstrap_blocks All Bootstrap Blocks
CVE-2024-50521WordPress Alley Elementor Widget plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityalleythemes Alley Elementor Widget
CVE-2024-49644WordPress Accessibility by AllAccessible plugin <= 1.3.4 - Privilege Escalation vulnerabilityAllAccessible
CVE-2024-43349WordPress All Bootstrap Blocks plugin <= 1.3.19 - Cross Site Scripting (XSS) vulnerabilityall_bootstrap_blocks All Bootstrap Blocks
CVE-2024-35169WordPress All Bootstrap Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityall_bootstrap_blocks All Bootstrap Blocks
CVE-2024-30468WordPress All-In-One Security (AIOS) – Security and Firewall plugin <= 5.2.6 - Cross Site Request Forgery (CSRF)…All In One WP Security & Firewall
CVE-2024-30372Allegra getLinkText Server-Side Template Injection Remote Code Execution VulnerabilityAllegra
CVE-2024-13714All-Images.ai – IA Image Bank and Custom Image creation <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Uploadallimages All-Images.ai – IA Image Bank and Custom Image…
CVE-2024-11643Accessibility by AllAccessible <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Option UpdateAllAccessible
CVE-2023-6778Cross-site Scripting (XSS) - Stored in allegroai/clearml-serverallegroai/clearml-server
CVE-2023-52334Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure VulnerabilityAllegra
CVE-2023-52332Allegra serveMathJaxLibraries Directory Traversal Information Disclosure VulnerabilityAllegra
CVE-2023-52147WordPress All-In-One Security (AIOS) plugin <= 5.2.4 - Secret Login Page Location Disclosure on Multisites vulnerabilityAll In One WP Security & Firewall
CVE-2023-51648Allegra getFileContentAsString Directory Traversal Information Disclosure VulnerabilityAllegra
CVE-2023-51646Allegra uploadSimpleFile Directory Traversal Remote Code Execution VulnerabilityAllegra
CVE-2023-51644Allegra SiteConfigAction Improper Access Control Remote Code Execution VulnerabilityAllegra
CVE-2023-51642Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution VulnerabilityAllegra
CVE-2023-51641Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution VulnerabilityAllegra
CVE-2023-51640Allegra extarctZippedFile Directory Traversal Remote Code Execution VulnerabilityAllegra
CVE-2023-51639Allegra downloadExportedChart Directory Traversal Authentication Bypass VulnerabilityAllegra
CVE-2023-4703All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege EscalationUnknown All in One B2B for WooCommerce
CVE-2023-4023All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDORUnknown All Users Messenger
CVE-2023-3547All in One B2B for WooCommerce <= 1.0.3 - Multiple CSRFUnknown All in One B2B for WooCommerce
CVE-2023-3248All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site ScriptingUnknown All-in-one Floating Contact Form, Call, Chat, and…
CVE-2023-30875WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)All My Web Needs Logo Scheduler
CVE-2023-0487My Sticky Elements < 2.0.9 - Admin+ SQLiUnknown All-in-one Floating Contact Form, Call, Chat, and…
CVE-2023-0157All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSSUnknown All-In-One Security (AIOS)
CVE-2023-0156All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via TraversalUnknown All-In-One Security (AIOS)
CVE-2022-44737WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesAll In One WP Security & Firewall Team All-In-One Security…
CVE-2022-4346All In One WP Security & Firewall < 5.1.3 - Configuration LeakUnknown All-In-One Security (AIOS)
CVE-2022-4256All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSSUnknown All-in-One Addons for Elementor
CVE-2022-4097All In One WP Security & Firewall < 5.0.8 - IP SpoofingUnknown All-In-One Security (AIOS)
CVE-2022-38093WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesAll in One SEO (WordPress plugin)
CVE-2022-34767ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization BypassALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan
CVE-2022-2546All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSSUnknown All-in-One WP Migration
CVE-2022-2299Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVGUnknown Allow svg files
CVE-2022-0148All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown All-in-one Floating Contact Form, Call, Chat, and…
CVE-2021-25102All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site ScriptingUnknown All In One WP Security & Firewall
CVE-2021-25037All In One SEO < 4.1.5.3 - Authenticated SQL InjectionUnknown All in One SEO – Best WordPress SEO Plugin – Easily…
CVE-2021-25036All In One SEO < 4.1.5.3 - Authenticated Privilege EscalationUnknown All in One SEO – Best WordPress SEO Plugin – Easily…
CVE-2021-24970All-In-One-Gallery < 2.5.0 - Admin+ Local File InclusionUnknown All-in-One Video Gallery
CVE-2021-24326All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown All 404 Redirect to Homepage
CVE-2021-24307All in One SEO Pack < 4.1.0.2 - Admin RCE via unserializeAll in One SEO – Best WordPress SEO Plugin – Easily Improve…
CVE-2021-24267All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSSUnknown All-in-One Addons for Elementor – WidgetKit
CVE-2021-24216All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCEUnknown All-in-One WP Migration
CVE-2020-37183Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)Allok RM RMVB to AVI MPEG DVD Converter
CVE-2020-36913All-Dynamics Software enlogic:show 2.0.2 Session Fixation Authentication BypassAll-Dynamics Software enlogic:show Digital Signage System
CVE-2020-36900All-Dynamics Digital Signage System 2.0.2 Cross-Site Request Forgery via User ManagementAll-Dynamics Software GmbH Digital Signage System
CVE-2020-36639AlliedModders AMX Mod X Console Command adminvote.sma cmdVoteMap path traversalAlliedModders AMX Mod X
CVE-2020-10507ALLE INFORMATION CO., LTD. School Manage System - Security MisconfigurationALLE INFORMATION CO., LTD. School Manage System
CVE-2020-10506ALLE INFORMATION CO., LTD. School Manage System - Path TraversalALLE INFORMATION CO., LTD. School Manage System
CVE-2020-10505ALLE INFORMATION CO., LTD. School Manage System - SQL InjectionALLE INFORMATION CO., LTD. School Manage System
CVE-2019-25606Fast AVI MPEG Joiner 1.2.0812 Buffer Overflow Denial of ServiceAlloksoft Fast AVI MPEG Joiner
CVE-2019-25363WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of ServiceAlloksoft WMV to AVI MPEG DVD WMV Convertor
CVE-2019-25362WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlowAlloksoft WMV to AVI MPEG DVD WMV Convertor
CVE-2018-25323Allok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEHAlloksoft Allok AVI DivX MPEG to DVD Converter
CVE-2018-25322Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflowalloksoft Fast AVI MPEG Splitter
CVE-2018-25315Alloksoft Video joiner 4.6.1217 Buffer Overflow via License NameAlloksoft Video Joiner
CVE-2018-25314Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer OverflowAlloksoft WMV to AVI MPEG DVD WMV Converter
CVE-2018-25303Allok Video to DVD Burner 2.6.1217 Buffer Overflow SEHAlloksoft Allok Video to DVD Burner
CVE-2018-25302Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEHAlloksoft Allok AVI to DVD SVCD VCD Converter
146 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.