Lucene search
K

190 matches found

Cvelist
Cvelist
added 2 days ago31 views

CVE-2026-54836 WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in YMC Filter allows SQL Injection. This issue affects YMC Filter: from n/a through 3.11.5...

9.3CVSS0.00229EPSS
Exploits0References1
CVE
CVE
added 2 days ago15 views

CVE-2026-54836

CVE-2026-54836 concerns the WordPress plugin “Filter & Grids” (versions up to 3.11.5). The issue is an SQL Injection due to improper neutralization of special elements in YMC Filter, affecting the plugin’s database queries. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) yields a base score...

9.3CVSS5.9AI score0.00229EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/06/18 9:38 a.m.5 views

WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Filter & Grids versions = 3.11.5...

9.3CVSS6AI score0.00229EPSS
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2026/05/05 10:21 p.m.11 views

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

Summary This report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during...

7.5CVSS5.9AI score0.00414EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/03/13 9:31 p.m.2 views

EUVD-2026-11913

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through = 3.5.1...

5.3CVSS5.8AI score0.0019EPSS
Exploits0References2
CVE
CVE
added 2026/03/13 11:42 a.m.8 views

CVE-2026-32397

CVE-2026-32397 affects the WordPress plugin “YMC Filter & Grids” (ymc-smart-filter) up to version 3.5.1. The vulnerability is described as a Missing Authorization/broken access control issue that allows exploitation via incorrectly configured access levels. The connected CVE entries confirm the a...

5.3CVSS5.8AI score0.0019EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.25 views

CVE-2026-32397 WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through = 3.5.1...

5.3CVSS0.0019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.0 views

CVE-2026-32397 WordPress Filter & Grids plugin <= 3.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filter & Grids: from n/a through = 3.5.1...

5.3CVSS5.8AI score0.0019EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.8 views

PT-2026-25243

CVE-2026-32397 Missing Authorization vulnerability in YMC Filter & Grids ymc-smart-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects … https://t.co/0rJAstKDkb...

5.3CVSS5.8AI score0.0019EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.4 views

WordPress plugin Filter & Grids 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.0019EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.5 views

CVE-2026-25391

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through = 1.3.07...

5.4CVSS0.00209EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:27 a.m.2 views

CVE-2026-25391

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through = 1.3.07...

5.5AI score0.00209EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.4 views

PT-2026-20724

Missing Authorization vulnerability in WP Grids WP Wand ai-content-generation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Wand: from n/a through = 1.3.07...

5.5AI score0.00209EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:21 a.m.6 views

CVE-2021-27416

An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of...

5.8CVSS6.9AI score0.00598EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:4 a.m.8 views

CVE-2024-39665

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in YMC Filter & Grids allows Stored XSS.This issue affects Filter & Grids: from n/a through 2.9.2...

6.5CVSS6AI score0.00273EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 3:32 p.m.4 views

CVE-2025-63031

Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest: from n/a through = 1.0.1...

5.3CVSS5.9AI score0.00176EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 3:15 p.m.2 views

CVE-2025-63031

Missing Authorization vulnerability in WP Grids EasyTest convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest: from n/a through = 1.0.1...

5.3CVSS0.00176EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 3:9 p.m.3 views

EUVD-2025-206043

Missing Authorization vulnerability in WP Grids EasyTest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest: from n/a through 1.0.1...

5.3CVSS6.5AI score0.00176EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.4 views

PT-2025-54352

Name of the Vulnerable Software and Affected Versions WP Grids EasyTest versions through 1.0.1 Description An authorization issue exists in WP Grids EasyTest, allowing exploitation due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Updat...

5.3CVSS6.5AI score0.00176EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/16 6:6 p.m.7 views

WordPress Filter & Grids plugin <= 3.2.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by mikemyers in WordPress Plugin Filter & Grids versions = 3.2.0...

5.9CVSS7.8AI score0.00244EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder