CVE-2026-31381

An attacker can extract user email addresses PII exposed in base64 encoding via the state parameter in the OAuth callback URL...

CVE-2026-31381

creationtimestamp| type| source ---|---|--- 2026-03-20 13:07:52+00:00| seen| https://bsky.app/profile/rapid7.com/post/3mhiljo6zek2g 2026-03-20 16:01:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhivaleean2u 2026-03-20 21:33:07+00:00| seen|...

CVE-2025-31381

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

CVE-2025-31381

creationtimestamp| type| source ---|---|--- 2025-04-04 18:01:25+00:00| seen| https://t.me/cvedetector/22138...

CVE-2025-31381

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification booking-calendar-and-notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through = 4.0.3...

CVE-2025-31381 WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar and Notification: from n/a through 4.0.3...

WordPress Booking Calendar and Notification plugin <= 4.0.3 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Pham Van Tam Patchstack Alliance in WordPress Plugin Booking Calendar and Notification versions = 4.0.3...

CVE-2024-31381

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2024-31381 WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2024-31381

Technical details about CVE-2024-31381 and affected products are not provided in the connected documents. Monitor for official advisories to learn impact, vulnerable components, and remediation.

CVE-2024-31381 WordPress Spotlight Social Feeds plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RebelCode Spotlight Social Media Feeds.This issue affects Spotlight Social Media Feeds: from n/a through 1.6.10...

CVE-2021-31381

creationtimestamp| type| source ---|---|--- 2021-10-19 22:33:47+00:00| seen| https://t.me/cibsecurity/30831...

CVE-2021-31381

CVE-2021-31381 refers to a configuration weakness in the JBoss Application Server (AppSvr) component of Juniper Networks SRC Series. A remote attacker can send a specially crafted query that may cause the web server to delete files, impacting integrity and availability. The NVD metrics show a hig...