CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

201 matches found

Rapid7 Vulnerability Database (full)•added 2026/08/15 12:00 a.m.•2 views

CVE-2026-15312: Improper Privilege Management

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the create function's REST endpoint failing to validate the user-supplied role parameter against an allowlist of permitted...

8.8CVSS5.5AI score0.00523EPSS

SaveExploits0References2

attackerkb•added 2026/08/14 12:45 p.m.•22 views

CVE-2026-19825

A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...

7.5CVSS7.2AI score0.00431EPSS

SaveExploits0References6Affected Software1

CVE•added 2026/08/14 12:45 p.m.•47 views

CVE-2026-19825

SourceCodester Simple Client Management System 1.0 is affected by a SQL injection in /classes/Master.php?f=save_service when the ID argument is manipulated. The vulnerability enables remote exploitation and has publicly disclosed exploit information. The issue is consistently described across CVE...

7.5CVSS7.2AI score0.00431EPSS

SaveExploits0References6

Rapid7 Vulnerability Database (full)•added 2026/08/14 12:00 a.m.•3 views

CVE-2026-19825: Improper Neutralization of Special Elements used in an SQL Command

7.5CVSS5.5AI score0.00431EPSS

SaveExploits0References3

RedhatCVE•added 2026/01/09 10:41 a.m.•27 views

CVE-2022-26284

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manageclient endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

9.8CVSS8.2AI score0.01979EPSS

SaveExploits1References1