CVE-2025-10377

CVE-2025-10377 の概念実証: プラグイン System Dashboard におけるクロスサイトリクエストフォージェリ CSRF 関数 sdtogglelogs 脆弱性タイプ: クロスサイトリクエストフォージェリ CSRF 影響を受ける関数: sdtogglelogs CVSS v3.1: 4.3 中 ベクトル: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N 注記: スコアは管理者権限を持つ被害者とユーザー操作を必要とする不正な状態変更を反映しています。 脆弱性の説明: 関数 sdtogglelogs...

CVE-2024-32444

CVE-2024-32444 截至 24/01/25，此漏洞尚未有补丁，因此这只是一个产品检测模板，所有与 RealHome wordpress 主题相关的产品均受影响。 该主题允许用户通过 inspiryajaxregister 函数注册新账户，但它未能正确检查授权或实现 nonce 验证。 如果网站启用了注册功能，攻击者可以在发送给注册函数的特制 HTTP 请求中任意指定其角色为“管理员”，从而绕过安全检查。 一旦注册为管理员，攻击者即可完全控制该 WordPress 站点，包括执行内容篡改、植入脚本以及访问用户或其他敏感数据。 如何运行此脚本？ 1. 从此处下载 Nuclei 2...

CVE-2026-16000 KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used

Missing cryptographic step in the DSTU 7624 CCM mode implementation KCcmBlockCipher in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can observe encrypted messages of known or chosen content to forge ciphertexts with valid authentication tags, via messages encrypt...

CVE-2021-24499

CVE-2021-24499 Workreap テーマにおける CVE-2021-24499 の大量悪用 - 認証不要のアップロードによるリモートコード実行へとつながる脆弱性。 AJAX アクション workreapawardtempfileuploader と workreaptempfileuploader は、nonce チェックを実行せず、またリクエストが正当なユーザーからのものであることを他の方法で検証しませんでした。これらのエンドポイントは、任意のファイルを uploads/workreap-temp...

PT-2026-97713

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50 Description An issue exists where the plugin fails to perform capability or nonce checks on an administrative maintenance action. A nonce is a unique token used to protect against...

CVE-2026-18364

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings...

CVE-2026-87069

The Forminator Forms WordPress plugin (versions 1.38.1-1.57.2.0 ) is vulnerable to an authorization bypass because it fails to perform nonce , capability , or ownership checks during a one-time payment-field migration. This migration occurs during the construction of an admin screen, which is tri...

EUVD-2026-85022

The zportals WordPress plugin before 6.4.2 does not perform any capability or nonce check on several of its AJAX actions, allowing users with a subscriber-level account to modify the zportals WordPress plugin before 6.4.2's stored integration settings...

PT-2026-97197

Name of the Vulnerable Software and Affected Versions WC Fields Factory WordPress plugin versions prior to 4.1.11 Description Insufficient access restrictions and missing nonce verification for a post-cloning action allow users with Contributor-level permissions or higher to duplicate arbitrary...

PT-2026-97158

Name of the Vulnerable Software and Affected Versions zportals WordPress plugin versions prior to 6.4.2 Description The plugin fails to perform capability or nonce checks on several AJAX actions. This allows users with subscriber-level accounts to modify stored integration settings. A nonce is a...

PT-2026-97184

Name of the Vulnerable Software and Affected Versions Forminator Forms WordPress plugin versions prior to 1.57.2.1 Description The plugin fails to perform a nonce, capability, or ownership check before executing a one-time payment-field migration during the construction of an admin screen. This...

CVE-2026-86802

The To Do List Member WordPress plugin through 1.6 does not have authorisation or nonce checks in an import routine, and does not validate the location it fetches the imported data from, allowing unauthenticated users to create arbitrary published posts and taxonomy terms on the site...

CVE-2026-90978

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin...

EUVD-2026-82682

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the content of arbitrary posts and delete the Filter Gallery WordPress plugin...

PT-2026-93304

The LearnPress WordPress plugin before 4.4.7 does not perform any authentication, capability or nonce check before serving a previously generated order export file, allowing unauthenticated attackers who can determine its identifier to download customer names, purchases, amounts and guest email...

CVE-2026-54155

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the UserNameIdentityToken authentication handler in packages/node-opcua-server/source/opcuaserver.ts decrypts an RSA-OAEP password blob but does not verify that the trailing bytes match the current session...

CVE-2026-54155 node-opcua: Missing nonce verification in UserNameIdentityToken authentication

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the UserNameIdentityToken authentication handler in packages/node-opcua-server/source/opcuaserver.ts decrypts an RSA-OAEP password blob but does not verify that the trailing bytes match the current session...

CVE-2026-88802 MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

EUVD-2026-77088

The MDJM Event Management WordPress plugin before 1.7.8.5 and the Mobile Events Manager WordPress plugin through 1.4.8.3 do not check a capability, a nonce or the type of the record before permanently deleting the post identified in a request to their playlist entry removal, allowing...

EUVD-2026-76951

The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created with a supported third-party form Conta...