Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2207 matches found

Positive Technologies
Positive Technologies•added 2026/02/26 12:0 a.m.•19 views

PT-2026-22108

Packistry is a self-hosted Composer repository designed to handle PHP package distribution. Prior to version 0.13.0, RepositoryAwareController::authorize verified token presence and ability, but did not enforce token expiration. As a result, an expired deploy token with the correct ability could...

4.3CVSS5.5AI score0.00185EPSS
SaveExploits0References4
CVE
CVE•added 2026/02/20 3:46 p.m.•16 views

CVE-2025-69390

CVE-2025-69390 affects the WordPress plugin 'Business Template Blocks for WPBakery (Visual Composer) Page Builder' (templates-and-addons-for-wpbakery-page-builder). It is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. Affec...

7.1CVSS5.5AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/02/20 1:26 p.m.•8 views

CVE-2026-25326

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS5.5AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/02/20 1:26 p.m.•7 views

CVE-2026-23547

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through = 2.5.8...

7.1CVSS5.5AI score0.00211EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/02/20 12:0 a.m.•10 views

WordPress plugin Business Template Blocks for WPBakery (Visual Composer) Page Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added to a...

7.1CVSS5.6AI score0.00175EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/02/20 12:0 a.m.•11 views

WordPress plugin Extensive VC Addons for WPBakery page builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

8.1CVSS5.8AI score0.00578EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2026/02/19 7:21 p.m.•10 views

CVE-2026-1426

The Advanced AJAX Product Filters plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.9.6 via deserialization of untrusted input in the shortcodecheck function within the Live Composer compatibility layer. This makes it possible for authenticated...

8.8CVSS6.1AI score0.0046EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/02/19 1:57 p.m.•13 views

WordPress Advanced AJAX Product Filters plugin <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility vulnerability

Authenticated Author+ PHP Object Injection via Live Composer Compatibility vulnerability discovered by WordFence in WordPress Plugin Advanced AJAX Product Filters versions = 3.1.9.6...

8.8CVSS5.5AI score0.0046EPSS
SaveExploits0References1Affected Software1
NVD
NVD•added 2026/02/19 9:16 a.m.•5 views

CVE-2026-25326

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS0.0037EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/19 9:16 a.m.•3 views

CVE-2026-23547

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through = 2.5.8...

7.1CVSS0.00211EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/19 8:26 a.m.•18 views

CVE-2026-25326

CVE-2026-25326 corresponds to a Local File Inclusion issue in the WordPress plugin CMSMasters Content Composer (cmsmasters-content-composer), affecting versions from n/a through 1.4.5. The vulnerability stems from improper control of filename for include/require statements, enabling LFI in CMSMas...

7.5CVSS5.5AI score0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/19 8:26 a.m.•2 views

CVE-2026-25326 WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS5.6AI score0.0037EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/19 8:26 a.m.•6 views

CVE-2026-25326

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

5.5AI score0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2026/02/19 8:26 a.m.•32 views

CVE-2026-25326 WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/19 8:26 a.m.•32 views

CVE-2026-23547 WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through = 2.5.8...

7.1CVSS0.00211EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/19 8:26 a.m.•1 views

CVE-2026-23547 WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Composer: from n/a through = 2.5.8...

7.1CVSS5.5AI score0.00211EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/19 8:26 a.m.•17 views

CVE-2026-23547

CVE-2026-23547 : WordPress CMSMasters Content Composer plugin

7.1CVSS5.5AI score0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2026/02/19 12:0 a.m.•9 views

PT-2026-20696

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

5.5AI score0.0037EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/02/19 12:0 a.m.•11 views

WordPress plugin CMSMasters Content Composer 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.1CVSS5.8AI score0.00211EPSS
SaveExploits0References1
CNNVD
CNNVD•added 2026/02/19 12:0 a.m.•12 views

WordPress plugin CMSMasters Content Composer 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits0References1
Rows per page
Query Builder