Lucene search
+L

110157 matches found

NVD
NVD
•added 2026/03/25 5:17 p.m.•11 views

CVE-2026-32521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects WP Custom Admin Interface: from n/a through = 7.42...

6.5CVSS0.00224EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 5:17 p.m.•13 views

CVE-2026-32498

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

7.5CVSS0.00394EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 5:16 p.m.•11 views

CVE-2026-24373

Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through = 6.0.7.1...

8.1CVSS0.00376EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:15 p.m.•29 views

CVE-2026-32521

CVE-2026-32521 is an authenticated stored cross-site scripting vulnerability in the WordPress plugin WP Custom Admin Interface (affecting

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:15 p.m.•46 views

CVE-2026-32521 WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects WP Custom Admin Interface: from n/a through = 7.42...

6.5CVSS0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 4:15 p.m.•6 views

CVE-2026-32521

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects WP Custom Admin Interface: from n/a through = 7.42...

5.8AI score0.00224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/25 4:15 p.m.•7 views

CVE-2026-32521 WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects WP Custom Admin Interface: from n/a through = 7.42...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/25 4:14 p.m.•6 views

CVE-2026-32498

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

5.8AI score0.00394EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/25 4:14 p.m.•25 views

CVE-2026-32498

CVE-2026-32498 is a Missing Authorization vulnerability in the RegistrationMagic plugin (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to and including 6.0.7.6. The Wordfence report explicitly attributes the issue to broken access...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•42 views

CVE-2026-32498 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

7.5CVSS0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•25 views

CVE-2026-24373

CVE-2026-24373: Affected software is Metagauss RegistrationMagic Custom Registration Forms, User Registration, Payment, and User Login (RegistrationMagic custom-registration-form-builder-with-submission-manager) version

8.1CVSS5.8AI score0.00376EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/03/25 10:10 a.m.•13 views

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squid 6...

4.6CVSS5.8AI score0.00345EPSS
SaveExploits1References24
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•18 views

WordPress plugin WP Custom Admin Interface 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-32498: Missing Authorization

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

7.5CVSS5.9AI score0.00394EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•14 views

PT-2026-27855

Name of the Vulnerable Software and Affected Versions Metagauss RegistrationMagic versions through 6.0.7.1 Description An incorrect privilege assignment exists in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager, allowing for privilege escalation. The issue...

8.1CVSS5.9AI score0.00376EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•0 views

CVE-2026-24373: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through = 6.0.7.1...

8.1CVSS5.8AI score0.00376EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/03/25 12:00 a.m.•26 views

Google Chrome Security Bypass Vulnerability (CNVD-2026-29365)

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security bypass vulnerability, which allows attackers to use custom HTML pages to perform UI deception...

6.5CVSS6.6AI score0.00288EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•0 views

CVE-2026-32521: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects WP Custom Admin Interface: from n/a through = 7.42...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/24 4:46 p.m.•18 views

WordPress Smart Custom Fields plugin <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure via Relational Post Search vulnerability discovered by darkmode in WordPress Plugin Smart Custom Fields versions = 5.0.6...

4.3CVSS5.8AI score0.00342EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/03/24 3:07 p.m.•62 views

CVE-2026-33335

CVE-2026-33335 affects Vikunja Desktop (Electron wrapper). From version 0.21.0 up to before 2.2.0, the wrapper forwards URLs from window.open() directly to shell.openExternal() without validation or protocol allowlisting. This enables an attacker who can inject a link that triggers window.open (e...

8CVSS5.9AI score0.00374EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder