109769 matches found
CVE-2026-103592
The simple-php-router library, specifically versions through 5.4.1.7 , contains an IP restriction bypass vulnerability within the IpRestrictAccess middleware. The root cause allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections by spoofing HTTP headers such as X...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CLEANSTART-2024-XJ18859 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-SA12234 Composer is an open source dependency manager for the PHP language
Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language...
CLEANSTART-2024-VD23894 Composer is a dependency manager for the PHP programming language
Security vulnerability affects the composer package. Composer is a dependency manager for the PHP programming language...
CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language
Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...
CLEANSTART-2024-ND02975 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CVE-2026-97256
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-103474
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...
CVE-2026-102377
Contributor PHP Object Injection in Photo Gallery by 10Web = 1.8.46 versions...
CVE-2026-102392
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-100512
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-102392
The Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin for WordPress is vulnerable to a PHP Object Injection vulnerability in versions
EUVD-2026-90225
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...