125 matches found
CVE-2026-42706
Unauthenticated Broken Access Control in DK = 3.2.1 versions...
EUVD-2026-96443
Unauthenticated Broken Access Control in DK = 3.2.1 versions...
CVE-2026-42706 WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in DK = 3.2.1 versions...
CVE-2026-42706
The WordPress DK theme (versions
WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme DK versions = 3.2.1...
@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)
@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: OSV:GHSA-955M-RR6M-2F9V...
Authorization Bypass
Copyparty is vulnerable to an authorization bypass. The vulnerability is due to improper handling of file and directory keys when the dk/dks directory-key flags are combined with the fk/fka file-key flags, which allows an attacker with a valid file key to convert it into a directory key and gain...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the process handling file and directory keys. An attacker can gain unauthorized read access to the containing folder by converting a valid file key into a directory key. This is only exploitable if both fileke...
PT-2026-80330
A valid filekey could potentially be converted into a dirkey, granting read-access to the containing folder. This issue only affected volumes which simultaneously enable both filekeys and dirkeys, with volflag dk or dks combined with fk or fka. Both required features are default-disabled, and mus...
CVE-2026-48307
creationtimestamp| type| source ---|---|--- 2026-07-01 09:45:23+00:00| seen| https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse 2026-07-01 13:00:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q 2026-07-08...
CVE-2025-14793
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
CVE-2025-14793
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
CVE-2025-14793
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
PT-2026-3223
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
WordPress plugin DK PDF code issue vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...
CVE-2025-14793: Server-Side Request Forgery (SSRF)
The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...
WordPress DK PDF - WordPress PDF Generator plugin <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery vulnerability
WordPress DK PDF - WordPress PDF Generator plugin = 2.3.0 - Authenticated Author+ Server-Side Request Forgery vulnerability discovered by WordFence in WordPress Plugin DK PDF – WordPress PDF Generator versions = 2.3.0...