397 matches found
CVE-2026-116410
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...
EUVD-2026-114306
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...
CVE-2026-116410
The Masteriyo - LMS WordPress plugin (versions
CVE-2026-116410 WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...
CVE-2026-116410 WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...
WordPress Masteriyo - LMS plugin <= 3.4.3 - Arbitrary Content Deletion vulnerability
WordPress Masteriyo - LMS plugin = 3.4.3 - Arbitrary Content Deletion vulnerability discovered by Sakri Koskimies Saggre in WordPress Plugin Masteriyo - LMS versions = 3.4.3...
CVE-2026-116410: masteriyo Masteriyo - LMS: Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS = 3.4.3 versions...
PT-2026-133756
Name of the Vulnerable Software and Affected Versions Masteriyo - LMS versions prior to 3.4.4 Description An issue allows unauthenticated users to perform arbitrary content deletion. Recommendations Update Masteriyo - LMS to version 3.4.4 or later...
CVE-2026-107907
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a...
PT-2026-122499
Name of the Vulnerable Software and Affected Versions MAS Videos WordPress plugin versions prior to 1.3.5 Description The plugin fails to perform capability or ownership checks when processing front-end requests to delete videos and playlists. Additionally, the nonce used for verification is link...
CVE-2026-57121 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members...
CVE-2026-57121
The praisonai-platform package (versions 0.1.4 to before 0.1.5) is vulnerable to an improper authorization issue in its Platform API. Specifically, six content DELETE endpoints for projects, agents, issues, labels, issue dependencies, and issue-label attachments fail to perform ownership or role ...
CVE-2026-57121 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents, issues, labels, issue dependencies, and issue-label attachments — created by the workspace owner or other members...
Mervin Praison PraisonAI authorization issue vulnerability
Versions Mervin Praison PraisonAI 0.1.4 through 0.1.5 contain an authorization issue vulnerability. This vulnerability arises because the content deletion endpoint only validates workspace member identities without checking ownership or roles. As a result, a workspace member can permanently delet...
CVE-2026-87942
Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: from 0.0.0 to 1.0.88...
EUVD-2026-97891
Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin users can send PUT or DELETE requests to /api/link,story,chest,album/id with numeric IDs to overwrite or delete othe...
CVE-2026-65459
Unauthenticated Arbitrary Content Deletion in Forminator = 1.57.3 versions...
EUVD-2026-96513
Unauthenticated Arbitrary Content Deletion in Forminator = 1.57.3 versions...