Lucene search
+L

265202 matches found

Packet Storm News
Packet Storm News
added 2026/09/10 12:0 a.m.245 views

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

5.8AI score
SaveExploits0
EUVD
EUVD
added 5 hours ago4 views

EUVD-2026-62346

The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...

5.3AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago8 views

CVE-2026-19782

The WPS Bidouille WordPress plugin before 1.33.5 lacks authorization checks on the wps_get_users AJAX action, allowing any authenticated subscriber to retrieve all registered users' email addresses. Upgrade to 1.33.5 or later. No in-the-wild exploitation is reported. See https://wpscan.com/vulner...

5.4AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago7 views

EUVD-2026-62292

The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJAX action, allowing any authenticated user, such as a subscriber, to retrieve the email addresses of all registered users...

5.4AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago6 views

CVE-2026-18231

The WP Directory Kit WordPress plugin (before 1.5.7) exposes the select_2_ajax_user AJAX endpoint without authorization checks, returning unfiltered database rows that let unauthenticated attackers harvest usernames and email addresses of plugin-role users. Updating to version 1.5.7 resolves the ...

5.4AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago6 views

CVE-2026-14861

User Verification by PickPlugins WordPress plugin (≤2.0.47) suffers an IDOR vulnerability: the resend-verification-email endpoint lacks authorization checks and does not bind the token to the target user, enabling unauthenticated arbitrary account lockout , including administrators. No patch vers...

5.6AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago6 views

EUVD-2026-62267

The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a verification email is authorized to act on the supplied user, nor bind the protecting token to that user, allowing unauthenticated attackers to reset arbitrary users' email-verification...

5.6AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago6 views

CVE-2026-13173

The Eventin WordPress plugin (before 4.1.21) lacks permission checks during speaker creation, letting contributor-level users modify other users' roles and metadata. WPScan documents the issue; upgrading to 4.1.21 or later resolves it. No in-the-wild exploitation is reported in the provided docum...

5.3AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago5 views

EUVD-2026-62259

The Eventin WordPress plugin before 4.1.21 does not verify the current user's permission to edit other users before assigning roles and updating user metadata during speaker creation, allowing users with contributor-level access and above to modify other users' roles and metadata...

5.3AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago5 views

EUVD-2026-62255

Certain system calls, such open2 with the OTRUNC flag set, and fspacectl2, could incorrectly free memory in largepage objects. These operations are not permitted on largepage objects, but the implementation did not verify this. An unprivileged local user can abuse the bug to access freed kernel...

7.3AI score
SaveExploits0References1
Nuclei
Nuclei
added 8 hours ago24 views

Push Notification for Post and BuddyPress <= 1.93 - SQL Injection

Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to SQL Injection via the 'onesignalexternalid' and 'onesignalgetsubscriptionoptionsid' paramters in all versions up to, and including, 1.93 due to insufficient escaping on the user supplied parameter and lack of sufficie...

9.8CVSS5.9AI score0.02758EPSS
SaveExploits1References2
Nuclei
Nuclei
added 8 hours ago30 views

Lightdash v0.1024.6 - Server-Side Request Forgery

Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...

7.3CVSS5.4AI score0.01933EPSS
SaveExploits0References2
Nuclei
Nuclei
added 8 hours ago76 views

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

5.4CVSS5.6AI score0.01027EPSS
SaveExploits1References3
Nuclei
Nuclei
added 8 hours ago70 views

User Meta WP Plugin < 3.1 - Sensitive Information Exposure

The User Meta is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0 via the /views/debug.php file. This makes it possible for unauthenticated attackers, with to extract sensitive configuration data. id: CVE-2024-33575 info: name: User Meta WP Plugin 3.1 -...

5.3CVSS5.2AI score0.01121EPSS
SaveExploits0References3
Nuclei
Nuclei
added 8 hours ago49 views

WordPress FlatPM <3.0.13 - Cross-Site Scripting

WordPress FlatPM plugin before 3.0.13 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape certain parameters before outputting them back in pages, which can be exploited against high privilege users such as admin. An attacker can steal cookie-based authenticatio...

5.4CVSS5.2AI score0.00869EPSS
SaveExploits2References5
Nuclei
Nuclei
added 8 hours ago60 views

WordPress Tutor LMS <2.0.10 - Cross Site Scripting

WordPress Tutor LMS plugin before 2.0.10 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the resetkey and userid parameters before outputting then back in attributes. An attacker can inject arbitrary script in the browser of an unsuspecting user in the conte...

6.1CVSS6AI score0.01347EPSS
SaveExploits2References3
Nuclei
Nuclei
added 8 hours ago1045 views

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

6.1CVSS5.9AI score0.04458EPSS
SaveExploits0References5
Nuclei
Nuclei
added 8 hours ago306 views

WSO2 User Registration - Arbitrary Account Creation

The SOAP admin service in WSO2 products has a security vulnerability that allows the creation of new user accounts regardless of the self-registration configuration settings. id: CVE-2024-7097 info: name: WSO2 User Registration - Arbitrary Account Creation author: iamnoooob,rootxharsh,pdresearch...

4.3CVSS5.3AI score0.00606EPSS
SaveExploits0References2
Nuclei
Nuclei
added 8 hours ago48 views

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

8.8CVSS9.1AI score0.04974EPSS
SaveExploits0References3
Nuclei
Nuclei
added 8 hours ago10 views

LatePoint <= 5.0.12 - Authentication Bypass

LatePoint plugin for WordPress versions up to 5.0.12 contains an authentication bypass caused by insufficient verification of user during booking, letting unauthenticated attackers log in as any existing user if they have user ID access, exploit requires access to user ID, and the 'Use WordPress...

9.8CVSS5.3AI score0.0308EPSS
SaveExploits0References3
Rows per page
Query Builder