EUVD-2026-80204

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed one...

EUVD-2026-80203

The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unauthenticated attackers who can determine its identifier to download customer names, purchases, amounts and guest email...

CVE-2026-86445

LearnPress WordPress plugin versions before 4.4.7 contain a missing capability check in the administrative template handler load_content_via_ajax. This allows unauthenticated attackers to retrieve the text, identifier, and type of every published quiz question on the site, as well as perform a ke...

CVE-2026-86449

The LearnPress WordPress plugin (before 4.4.7 ) contains a missing capability check in one of its REST routes. An unauthenticated attacker can supply a custom post status filter to list courses that are not published, including those in draft, pending, private, scheduled, and trashed states. The ...

EUVD-2026-80195

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

CVE-2026-85572

The Tutor LMS WordPress plugin (versions 4.0.0 through

CVE-2026-85349

The FluentBoards WordPress plugin before 2.0.15 contains an Insecure Direct Object Reference (IDOR) flaw in its authorization logic. When returning the list of boards a user belongs to, the plugin fails to properly verify authorization, allowing any authenticated user at Subscriber level or above...

EUVD-2026-80198

The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...

CVE-2026-78474

The Ni WooCommerce Sales Report WordPress plugin (before 4.2.0 ) is missing authentication and authorization checks on its report-printing routine (identified via the btn_print parameter). This allows unauthenticated users to retrieve WooCommerce order details and customer contact information, ta...

CVE-2026-82126

CVE-2026-82126 affects the Schema & Structured Data for WP & AMP WordPress plugin, versions 1.63 through 1.65 (before 1.66). The plugin fails to verify that a requesting user is allowed to edit the specific post for which schema generation is requested. As a result, any user with the contributor ...

CVE-2026-82124

The Schema & Structured Data for WP & AMP WordPress plugin versions prior to 1.66 fail to check whether a post is password protected before including its content in the structured data it generates. This allows unauthenticated users to obtain the content of password-protected posts via more than ...

EUVD-2026-80187

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check whether a post is password protected before including its content in the structured data it generates, allowing unauthenticated users to obtain the content of password protected posts via more than one public...

EUVD-2026-80189

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...

EUVD-2026-80188

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...

CVE-2026-82125

The Schema & Structured Data for WP & AMP WordPress plugin (versions 1.46–1.65 ) contains an Insecure Direct Object Reference (IDOR) vulnerability. The plugin fails to correctly verify the ownership or moderation status of a comment before returning its content. As a result, unauthenticated users...

EUVD-2026-80179

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a user-supplied file path before reading it and copying it into a publicly accessible directory, allowing any user whose role an administrator has granted the WP Import Export Lite WordPress plugin before 3.9.33's import...

CVE-2026-76555

The WP Import Export Lite WordPress plugin, prior to version 3.9.33 , contains an authenticated sensitive file disclosure vulnerability in its import functionality. A user-supplied file path is read and copied into a publicly accessible directory without proper validation, enabling any user grant...

CVE-2017-5487

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco is a snmp scanner that can be used both for internal testing and external testing to assess Cisco Nexus switches 5000 and 6000 family. There are many snmp scanners and brute forcers this was made for just completeness.It has the...

CVE-2025-58434

CVE-2025-58434 - Flowise 未认证账户接管，链接至 CustomMCP RCE 两个 Flowise 3.0.5 问题，已链接： 1. CVE-2025-58434 - 密码重置令牌泄露。 POST /api/v1/account/forgot-password 直接在 JSON 响应中返回目标用户的 tempToken。将其提供给 POST /api/v1/account/reset-password 即可为任何账户（包括第一个管理员）设置已知密码 - 完全未认证账户接管。 2. CustomMCPmcpServerConfig 服务端 JavaScript 评估...