CVE-2026-107323

The Gallery PhotoBlocks WordPress plugin versions before 1.3.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape specific gallery settings before they are rendered into an HTML attribute. This allows users with Contributor-level acc...

CVE-2026-104752

The Rank Math SEO WordPress plugin, in versions prior to 1.0.280 , is vulnerable to remote code execution (RCE) . The root cause is an unrestricted upload of file with dangerous type (CWE-434) within the settings import feature, which fails to correctly validate the type of uploaded files. This a...

CVE-2026-104752 Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import

The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution...

EUVD-2026-96118

The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

CVE-2026-104766 Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.7.3. This is due to the OsSettingsController::update handler iterating over attacker-supplied settings parameters...

WELA

WELA Windows Event Log Analyzer ゑ羅 Windows 이벤트 로그 설정 감사 도구 Yamato Security 제작 — DFIR에 중요한 이벤트를 실제로 기록하고 있는지 확인하세요. 📖 문서 보기 → 15개 언어 지원 — English · 日本語 · 繁體中文 · 한국어 · Deutsch · Türkçe · Français · Español · Português Brasil · Українська · हिन्दी · Bahasa Indonesia · မြန်မာဘာသာ · ไทย · العربية 🦅 소개...

CVE-2025-65672

CVE-2025-65672 classroomio 0.1.13의 취약한 직접 객체 참조IDOR로 인해 과정 설정에 대한 승인되지 않은 공유 및 초대 액세스가 허용됩니다. 영향받는 제품: ClassroomIO 영향받는 버전: 0.1.13 발견자: Rivek Raj Tamang RivuDon, Sikkim, 인도 취약점 세부 정보 취약한 직접 객체 참조IDOR / 손상된 접근 제어 요약 ClassroomIO 버전 0.1.13에는 학생비권한 사용자이 제한된 과정 설정, 특히 공유 및 초대 관리 인터페이스에 액세스할 수 있도록 하는...

allstar

Allstar !IMPORTANT OpenSSF가 호스팅하는 Allstar GitHub App은 더 이상 제공되지 않습니다. OpenSSF Scorecard 하위 프로젝트인 Allstar 자체는 계속 유지 관리되며, 이제 직접 실행해야 합니다. GitHub Action으로 실행하거나 서비스 데몬으로 실행할 수 있습니다. 자세한 내용은 ossf/allstar881을 참조하세요. 조직에서 호스팅 앱을 사용 중이었다면 호스팅 앱에서 마이그레이션을 참조하세요. 개요 Allstar란 무엇인가? Allstar의 새로운 기능...

CVE-2022-32060

Snipe-IT 버전 v6.0.2 취약점 설명: Snipe-IT v6.0.2의 브랜딩 설정 업데이트 구성 요소에서 임의 파일 업로드 취약점으로 인해 공격자가 조작된 파일을 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: 브랜딩 설정 업데이트 페이지에서 악성 파일을 업로드할 때 파일 업로드 취약점을 발견했습니다. 페이로드 : https://github.com/bypazs/GrimTheRipper/blob/main/GrimTheRipperTeam.svg 테스트 환경: 1. Snipe-IT 버전 v6.0.2 2. Google...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Buffalo WSR-2533DHPL2 - Improper Access Control

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor. id: CVE-2021-20092 info: name: Buffalo WSR-2533DHPL2 - Improper Access Control author: gy741,pdteam,par...

Bloofox v0.5.2.1 - SQL Injection

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit. id: CVE-2023-34754 info: name: Bloofox v0.5.2.1 - SQL Injection author: ritikchaddha severity: critical description: | bloofox v0.5.2.1 was...

WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure

Widgets for Social Photo Feed WordPress plugin = 1.8 contains a broken access control caused by missing capability checks on specific REST API endpoints, letting unauthenticated attackers access and modify plugin settings remotely. id: CVE-2025-14726 info: name: WordPress Widgets for Social Photo...

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...

Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export

includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...

Spring Cloud Gateway Server Webflux - Broken Access Control

Spring Cloud Gateway Server Webflux contains a vulnerability caused by unsecured and exposed actuator endpoints allowing modification of Spring Environment properties, letting attackers modify configuration, exploit requires unsecured actuator endpoints exposure. id: CVE-2025-41243 info: name:...

WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update

Bookit WordPress plugin 2.5.1 contains a broken access control vulnerability caused by a publicly accessible REST endpoint allowing unauthenticated update of Stripe payment options, letting remote attackers modify payment settings without authentication. id: CVE-2025-12841 info: name: WordPress...

WAVLINK WN533A8 - Improper Access Control

WAVLINK WN533A8 M33A8.V5030.190716 is susceptible to improper access control. An attacker can obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser; and thereby possibly obtain sensitive information, modify data, and/or execute...

Autoptimize < 3.1.0 - Information Disclosure

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs. id: CVE-2022-4057 info: name: Autoptimize 3.1.0 - Information Disclosure author: DhiyaneshDK severity: medium description: | The Autoptimize WordPress plugin before 3.1.0 uses...