62132 matches found
EUVD-2026-71943
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-86111 BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses
BookWyrm through 0.9.1 fails to validate user visibility permissions in the status edit endpoint, allowing authenticated attackers to read followers-only and direct-message reviews by enumerating sequential status IDs. Attackers can access the raw content of restricted statuses through the edit...
CVE-2026-75586
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formDataid' Parameter in all versions up to, and including, 2.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-75586 Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formDataid' Parameter in all versions up to, and including, 2.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-75586 Unlimited Elements For Elementor <= 2.0.17 - Reflected Cross-Site Scripting via 'formData[id]' Parameter
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formDataid' Parameter in all versions up to, and including, 2.0.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-75586
Unlimited Elements For Elementor (WordPress plugin) is affected by a Reflected Cross-Site Scripting vulnerability in the formData[id] parameter across all versions up to and including 2.0.17 . The root cause is a front-end AJAX handler registered on the public wp action with no nonce, capability,...
ROOT-OS-UBUNTU-2404-CVE-2026-45836 CVE-2026-45836 in linux - Patched by Root
Root has patched CVE-2026-45836 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31715 CVE-2026-31715 in linux - Patched by Root
Root has patched CVE-2026-31715 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-68218 CVE-2025-68218 in linux - Patched by Root
Root has patched CVE-2025-68218 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-71148 CVE-2025-71148 in linux - Patched by Root
Root has patched CVE-2025-71148 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2026-84221 Kirki 6.0.0 - 6.2.5 - Editor+ SQLi via Content Manager Field ID
The Kirki WordPress plugin before 6.3.0 does not escape a user-supplied identifier before using it in a SQL query, allowing users with editor-level access and above to append arbitrary SQL and read the contents of the database, including user credentials...
CVE-2026-84221
The Kirki WordPress plugin (versions 6.0.0 - 6.2.5 ) is vulnerable to SQL injection because it fails to escape a user-supplied identifier before incorporating it into a SQL query. This flaw specifically affects the Content Manager Field ID . An attacker with editor-level access or higher can expl...
ROOT-OS-UBUNTU-2204-CVE-2026-45949 CVE-2026-45949 in linux - Patched by Root
Root has patched CVE-2026-45949 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-56692 CVE-2024-56692 in linux - Patched by Root
Root has patched CVE-2024-56692 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-39823 CVE-2025-39823 in linux - Patched by Root
Root has patched CVE-2025-39823 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2023-52935 CVE-2023-52935 in linux - Patched by Root
Root has patched CVE-2023-52935 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23303 CVE-2026-23303 in linux - Patched by Root
Root has patched CVE-2026-23303 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...