CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

CVE-2024-10354

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\print.php file,...

CVE-2023-49968

CVE-2023-49968 Customer Support System 1.0 - SQL Injection Vulnerability in managedepartment.php via "id" URL Parameter Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. An attacker with malicious intent can execute SQL commands on the MySQL database ...

CVE-2026-92715

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2026-109368

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private...

CVE-2026-92715 Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2026-92715

The Tutor LMS plugin for WordPress (versions up to and including 4.1.0 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a lack of validation on the 'ID' parameter ; the Input::sanitize_array() function preserves attacker-supplied POST keys, allowing WordPress's wp...

CVE-2026-109368 WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private...

EUVD-2026-103222

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2026-92715 Tutor LMS <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Course Modification and Ownership Takeover via 'ID' Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2026-109368 WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private...

EUVD-2026-103223

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract private...

CVE-2026-109368

The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 2.1.0.3 . The flaw exists because the wpbs_refresh_calendar_editor AJAX action fails to perform adequate authorization checks on the id parameter. This all...

ROOT-OS-DEBIAN-13-CVE-2026-23373 CVE-2026-23373 in linux - Patched by Root

Root has patched CVE-2026-23373 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63825 CVE-2026-63825 in linux - Patched by Root

Root has patched CVE-2026-63825 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-68776 CVE-2025-68776 in linux - Patched by Root

Root has patched CVE-2025-68776 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-46216 CVE-2026-46216 in linux - Patched by Root

Root has patched CVE-2026-46216 in the linux package for Root:Debian:13. Multiple fixed versions available...

PT-2026-116201

Name of the Vulnerable Software and Affected Versions Hippoo Mobile App for WooCommerce versions prior to 1.13.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user in...

PT-2026-116454

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0-alpha through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authentication bypass exists that allows users authenticated via an Identity Provider IdP to skip Time-based One-Time Password TOTP...

PT-2026-116356

Name of the Vulnerable Software and Affected Versions WP Booking System – Booking Calendar versions prior to 2.1.0.4 Description Authenticated users with subscriber-level access and above can extract private per-event booking descriptions and booking IDs from any calendar managed by the site. Thi...