Lucene search
+L

3227 matches found

Debian CVE
Debian CVE
•added 2026/02/09 7:02 p.m.•30 views

CVE-2026-2245

Removed by vendor...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•72 views

PT-2026-7130

A vulnerability was identified in CCExtractor up to 183. This affects the function parse PAT/parse PMT in the library src/lib ccx/ts tables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit...

4.8CVSS4.6AI score0.00147EPSS
SaveExploits0References10
Packet Storm News
Packet Storm News
•added 2026/02/06 12:00 a.m.•22 views

ACORN-IDS: Adaptive Continual Novelty Detection for Intrusion Detection Systems

Intrusion Detection Systems IDS must maintain reliable detection performance under rapidly evolving benign traffic patterns and the continual emergence of cyberattacks, including zero-day threats with no labeled data available. However, most machine learning-based IDS approaches either assume...

5.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/02/05 1:22 p.m.•22 views

CVE-2025-15508

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.7AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/04 9:15 a.m.•28 views

CVE-2025-15507

The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsyncusage function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to modify the plugin's...

5.3CVSS0.00345EPSS
SaveExploits0References3
NVD
NVD
•added 2026/02/04 9:15 a.m.•29 views

CVE-2025-15508

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS0.00342EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/04 8:25 a.m.•16 views

CVE-2025-15508

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.8AI score0.00342EPSS
SaveExploits0References3
CVE
CVE
•added 2026/02/04 8:25 a.m.•46 views

CVE-2025-15508

The CVE-2025-15508 entry affects WordPress plugin Magic Import Document Extractor (versions ≤ 1.0.4). The underlying issue is a Sensitive Information Exposure: get_frontend_settings() allows unauthenticated attackers to read the site’s magicimport.ai license key from the page source on pages cont...

5.3CVSS5.8AI score0.00342EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/04 8:25 a.m.•51 views

CVE-2025-15508 Magic Import Document Extractor <= 1.0.6 - Unauthenticated Sensitive Information Exposure

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS0.00342EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/04 8:25 a.m.•12 views

CVE-2025-15508 Magic Import Document Extractor <= 1.0.4 - Unauthenticated Sensitive Information Exposure

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.8AI score0.00342EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/04 8:25 a.m.•25 views

EUVD-2025-206794

The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsyncusage function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to modify the plugin's...

5.3CVSS5.5AI score0.00345EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/04 8:25 a.m.•15 views

CVE-2025-15507

The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsyncusage function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to modify the plugin's...

5.3CVSS5.5AI score0.00345EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•30 views

CVE-2025-63372

Articentgroup Zip Rar Extractor Tool 1.345.93.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents...

4.3CVSS5.9AI score0.00444EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•30 views

WordPress plugin Magic Import Document Extractor has a vulnerability related to information leakage

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.7AI score0.00342EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•9 views

CVE-2025-15507: Missing Authorization

The Magic Import Document Extractor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxsyncusage function in all versions up to, and including, 1.0.5. This makes it possible for unauthenticated attackers to modify the plugin's...

5.3CVSS5.8AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•27 views

WordPress plugin Magic Import Document Extractor has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00345EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•11 views

CVE-2025-15508: Exposure of Sensitive Information to an Unauthorized Actor

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•73 views

PT-2026-5889

Name of the Vulnerable Software and Affected Versions Magic Import Document Extractor plugin for WordPress versions up to and including 1.0.4 Description The software is susceptible to unauthorized data modification because of a missing authorization check within the ajax sync usage function. Thi...

5.3CVSS5.5AI score0.00345EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/02/03 11:29 p.m.•23 views

WordPress Magic Import Document Extractor plugin <= 1.0.4 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by Teerachai Somprasong in WordPress Plugin Magic Import Document Extractor versions = 1.0.4...

5.3CVSS5.4AI score0.00342EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/03 11:21 p.m.•26 views

WordPress Magic Import Document Extractor plugin <= 1.0.4 - Missing Authorization to Unauthenticated Plugin License Status Modification vulnerability

Missing Authorization to Unauthenticated Plugin License Status Modification vulnerability discovered by Teerachai Somprasong in WordPress Plugin Magic Import Document Extractor versions = 1.0.4...

5.3CVSS5.8AI score0.00345EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder