Vulnerabilities found by PXLSec researchers and disclosed to the vendor. https://pxlsec.com/research/feed.xml 2025-08-22T00:00:00Z PXLSechttps://pxlsec.com © 2026 PXLSecurity LTD. https://pxlsec.com/research/openmediavault-privilege-escalation-cve-2025-50674 2025-08-22T00:00:00Z

CVE-2025-50674 — OpenMediaVault local privilege escalation. Local privilege escalation in OpenMediaVault, published CVSS 7.8 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/school-management-pro-sql-injection-cve-2024-33911 2024-05-02T00:00:00Z

CVE-2024-33911 — Weblizar School Management Pro SQL injection. SQL injection in School Management Pro, published CVSS 7.6 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/bwl-advanced-faq-manager-sql-injection-cve-2024-32136 2024-04-15T00:00:00Z

CVE-2024-32136 — BWL Advanced FAQ Manager SQL injection. SQL injection in BWL Advanced FAQ Manager, published CVSS 7.6 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/woocommerce-customers-manager-sql-injection-cve-2024-0399 2024-04-15T00:00:00Z

CVE-2024-0399 — WooCommerce Customers Manager SQL injection. SQL injection in WooCommerce Customers Manager, published CVSS 8.1 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/aikit-sql-injection-cve-2024-31370 2024-04-09T00:00:00Z

CVE-2024-31370 — AIKit for WordPress SQL injection. SQL injection in AIKit, published CVSS 8.5 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/calendarista-sql-injection-cve-2024-30240 2024-03-28T00:00:00Z

CVE-2024-30240 — Typps Calendarista SQL injection. SQL injection in Calendarista, published CVSS 8.5 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/fancy-product-designer-sql-injection-cve-2024-0365 2024-03-18T00:00:00Z

CVE-2024-0365 — Fancy Product Designer SQL injection. SQL injection in Fancy Product Designer, published CVSS 6.5 Medium. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/smart-manager-sql-injection-cve-2024-0566 2024-02-12T00:00:00Z

CVE-2024-0566 — Smart Manager for WordPress SQL injection. SQL injection in Smart Manager, published CVSS 7.2 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/burst-statistics-sql-injection-cve-2024-0405 2024-01-17T00:00:00Z

CVE-2024-0405 — Burst Statistics for WordPress SQL injection. SQL injection in Burst Statistics — Privacy-Friendly WordPress Analytics, published CVSS 7.2 High. Published advisory from PXLSec, with the authoritative references.

https://pxlsec.com/research/easynas-command-injection-cve-2023-0830 2023-02-14T00:00:00Z

CVE-2023-0830 — EasyNAS OS command injection. OS command injection in EasyNAS, published CVSS 8.8 High. Published advisory from PXLSec, with the authoritative references.