91085 matches found
CVE-2026-84908
The WPFunnels WordPress plugin (versions ≤ 3.12.13 ) is vulnerable to Missing Authorization in its wpfnl_load_payment AJAX action, which is registered for both authenticated and unauthenticated users. The underlying add_offer_product_to_cart() function performs no nonce verification, no capabilit...
CVE-2026-19946 Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter
The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpasdomrdenyuser function, which unlike its counterpart wpasdomractivateuser does not enforce currentusercan'editusers' or...
CVE-2026-19946
The Awesome Support plugin for WordPress (versions up to and including 6.3.9 ) contains a Missing Authorization flaw in the wpas_do_mr_deny_user() function. Unlike its counterpart wpas_do_mr_activate_user(), this function fails to enforce a current_user_can('edit_users') capability check, relying...
EUVD-2026-74686
The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpasdomrdenyuser function, which unlike its counterpart wpasdomractivateuser does not enforce currentusercan'editusers' or...
CVE-2019-8451
Este repositorio no tiene un README...
-CVE-2005-3299-
This repository does not have a README...
cve-2017-12149
Este repositorio no tiene un README...
CVE-2024-27956
This repository does not have a README...
CVE-2023-29808
Título del Exploit: Cross-Site Scripting Reflejado Google Dork: Fecha: 27.04.2023 Autor del Exploit: Lucas Noki 0xPrototype Página del Proveedor: https://github.com/vogtmh Enlace del Software: https://github.com/vogtmh/cmaps Versión: 8.0 Probado en: Mac, Windows, Linux CVE : CVE-2023-29808...
yasa-cve-2024-43202
Este repositorio no tiene un README...
CVE-2026-11821 Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
The Eventin – Event Calendar, Event Registration, Tickets & Booking AI Powered plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.1.17. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...
CVE-2026-75966
The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episodecontributor....comment' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-13486.-CVE-2025-13486
Este repositorio no tiene un README...
CVE-2026-31431-
This repository does not have a README...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
CVE-2024-2074
Este repositorio no tiene un README...
CVE-2025-59287
Este repositorio no tiene un README...
CVE-2026-31431
This repository does not have a README...
CVE-2026-12956
The WP Event Solution Eventin plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the createitem handler for the /wp-json/eventin/v2/orders REST endpoint. The endpoint's createitempermissionscheck function only verifies a wprest nonce which is...