1410 matches found
CVE-2026-84047 Album Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_action
The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
PT-2026-90577
Name of the Vulnerable Software and Affected Versions Album Cover Finder versions prior to 0.7.1 Description The Album Cover Finder WordPress plugin fails to properly sanitize and escape the and action parameter before incorporating it into a SQL query. This flaw allows unauthenticated users to...
CVE-2026-84047: Improper Neutralization of Special Elements used in an SQL Command
The Album Cover Finder WordPress plugin through 0.7.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...
DEBIAN-CVE-2026-82617
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2026-82617
The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULTREGEXNAMEFINDER.EMAIL and DEFAULTREGEXNAMEFINDER.URL - contain ambiguous nested quantifiers. An application that obtains these finders through RegexNameFinderFactory.getDefaultRegexNameFinders...
CVE-2026-81768
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
PT-2026-84015
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81768: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Super Store Finder versions = 7.10...
threat-finder v0.3.0
OffSeq Threat Finder threat-finder finds the vulnerable software actually running on a host — not what a manifest claims — and tells you which findings are network-reachable. It resolves each running service and, with --scope all, every installed OS package to an exact Package-URL and matches it...
WordPress Super Store Finder plugin <= 7.8 - Unauthenticated SQL Injection via ssf_tracking vulnerability
Unauthenticated SQL Injection via ssftracking vulnerability discovered by Michael Bielenberg in WordPress Plugin Super Store Finder versions = 7.8...
CVE-2026-73392
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-12965...
CVE-2026-73392
...
CVE-2026-73392
CVE-2026-73392 describes an unauthenticated SQL injection in the WordPress plugin Super Store Finder , affecting versions ≤ 7.8 (prior to 7.9). The vulnerability allows an unauthenticated attacker to interfere with database queries, potentially retrieving data they should not access. The issue wa...