CVE-2026-16575 Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict access to per-vendor commission configuration returned by one of its unauthenticated store REST endpoints, allowing any unauthenticated user to disclose a vendor's commission type...

CVE-2026-16575

CVE-2026-16575 affects the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin in versions prior to 5.0.14 . The vulnerability is an unauthenticated information disclosure caused by a missing access restriction on a store REST endpoint that returns per-vendor commissio...

CVE-2019-16575

A cross-site request forgery vulnerability in Jenkins Alauda Kubernetes Suport Plugin 2.3.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing the Kubernetes service account token or credentials...

CVE-2019-16575

CVE-2019-16575 describes a cross-site request forgery in the Jenkins Alauda Kubernetes Support Plugin (versions ≤ 2.3.0). An attacker can coax the Jenkins instance to connect to a URL of their choosing using attacker-specified credentials IDs, potentially exposing the Kubernetes service account t...

CVE-2018-16575

...

CVE-2018-16575

CVE-2018-16575 entry is rejected/not used; this is not a security issue.

Foxit Reader <= 8.3.1 Multiple Vulnerabilities - Linux

Foxit Reader is prone to multiple code execution and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2017-16575

CVE-2017-16575 affects Foxit Reader and is a remote code execution vulnerability in the XFA bind element. The root cause is a failure to validate the existence of an object before performing operations on it, enabling an attacker to execute arbitrary code in the current process when a user opens ...