Lucene search
K

9737 matches found

CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

WordPress plugin Reviewify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.3AI score0.00012EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-1589

Name of the Vulnerable Software and Affected Versions Moosend Landing Pages plugin for WordPress versions through 1.1.6 Description The Moosend Landing Pages plugin for WordPress has a flaw that allows unauthorized modification of data. This is due to a missing capability check within the moosend...

5.3CVSS6.4AI score0.0003EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-1595

Name of the Vulnerable Software and Affected Versions Unify plugin for WordPress versions up to and including 3.4.9 Description The Unify plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check on the 'init' action. This allows unauthenticated...

5.3CVSS5.9AI score0.00089EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

WordPress plugin Moosend Landing Pages 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.0003EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.3 views

PT-2026-1661

Warning: Multiple High and Critical vulnerabilities in iccDEV versions 2.3.1. CVE-2026-21676 CVE-2026-216767 CVE-2026-21485 CVE-2026-21675 CVE-2026-21507 CVSS: 9.8-7.5. Remote attackers can exploit them to gain access to sensitive data, cause DoS, modify data. Patch...

9.8CVSS7.1AI score0.00144EPSS
Exploits4References1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

WordPress plugin Unify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.00089EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

WordPress plugin Awesome Hotel Booking 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.3AI score0.00035EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2026/01/06 1:46 p.m.0 views

mysql: mariadb: InnoDB unspecified vulnerability (CPU Apr 2025)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

5.5CVSS5.7AI score0.00651EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/01/06 1:46 p.m.2 views

mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025)

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

6.8CVSS5.8AI score0.01044EPSS
Exploits0References5
NVD
NVD
added 2026/01/06 9:15 a.m.1 views

CVE-2025-13964

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the catchlpajax function in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to modify course contents b...

5.3CVSS0.00102EPSS
Exploits0References3
NVD
NVD
added 2026/01/06 8:15 a.m.1 views

CVE-2025-14371

The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the taxopressaiaddpostterm function in all versions up to, and including, 3.41.0. This makes it possible for authenticat...

4.3CVSS0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.4 views

WordPress plugin MasterStudy LMS WordPress Plugin – for Online Courses and Education 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

5.4CVSS6.4AI score0.00033EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

WordPress plugin Depicter 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.00108EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.0 views

WordPress plugin Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Tag...

4.3CVSS6.3AI score0.00032EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

WordPress plugin Appointment Booking and Scheduling Calendar Plugin – WP Timetics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.5CVSS6.3AI score0.00102EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.1 views

WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞

...

5.3CVSS6.7AI score0.00102EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.2 views

WordPress plugin Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.4AI score0.00099EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/02 12:0 a.m.6 views

PT-2026-1125

Name of the Vulnerable Software and Affected Versions Bagisto versions prior to 2.3.10 Description Bagisto, an open source Laravel eCommerce platform, has an issue where API routes remain active even after the initial installation is complete. The API endpoints /install/api/ are directly accessib...

9.8CVSS6.8AI score0.00144EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-34077

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 25.0.1 Description An issue in the Libraries component allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can lead to unauthorized update, insert, or delete acces...

7.5CVSS7.7AI score0.00154EPSS
Exploits0References61
NVD
NVD
added 2025/12/30 1:16 p.m.3 views

CVE-2025-14426

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'editrating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above t...

4.3CVSS0.00034EPSS
Exploits0References4
Rows per page
Query Builder