109861 matches found
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CLEANSTART-2024-XJ18859 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-SA12234 Composer is an open source dependency manager for the PHP language
Security vulnerability affects the composer package. Composer is an open source dependency manager for the PHP language...
CLEANSTART-2024-VD23894 Composer is a dependency manager for the PHP programming language
Security vulnerability affects the composer package. Composer is a dependency manager for the PHP programming language...
CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language
Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...
CLEANSTART-2024-ND02975 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97256
Editor PHP Object Injection in Page Builder by SiteOrigin = 2.36.0 versions...
CVE-2026-103474
yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticated managers to upload PHP files. Attackers with manager role can upload PHP scripts to the web-accessible storage directory and request them to execute arbitrary code on the serv...
CVE-2026-102377
Contributor PHP Object Injection in Photo Gallery by 10Web = 1.8.46 versions...
CVE-2026-102392
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-100512
Contributor PHP Object Injection in Nested Pages = 3.3.2 versions...
CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
EUVD-2026-90225
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-102392 WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Custom Product Addons and Fields = 3.3.8 versions...
CVE-2026-102392
The Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin for WordPress is vulnerable to a PHP Object Injection vulnerability in versions