44521 matches found
CVE-2026-65493
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65456
Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...
CVE-2026-65463
Subscriber Insecure Direct Object References IDOR in Masteriyo - LMS = 2.3.1 versions...
CVE-2026-61946
Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...
CVE-2026-59544
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory
A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...
WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Paid Member Subscriptions versions = 3.0.7...
PYSEC-2026-3541 TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint
Impact The /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration. By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint
ImpactThe /internal/objectstorage endpoint accepts a caller-supplied JSON storagepath parameter that dynamically overrides the TensorZero objectstorage configuration.By abusing the filesystem storage type, a caller can read arbitrary files from the gateway filesystem, including files that may...
EUVD-2026-48112
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
CVE-2026-65501
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
CVE-2026-65501
CVE-2026-65501 affects the WordPress plugin Shiptastic for WooCommerce (versions
EUVD-2026-48108
Administrator PHP Object Injection in Complianz = 7.5.0 versions...
CVE-2026-65497
Administrator PHP Object Injection in Complianz = 7.5.0 versions...
CVE-2026-65497
CVE-2026-65497 concerns the WordPress Complianz plugin, affected in versions ≤ 7.5.0, with a PHP Object Injection vulnerability identifiable under the described Administrator context. The root cause is a PHP object injection flaw within Complianz that could be exploited via a network attack vecto...
CVE-2026-65497 WordPress Complianz plugin <= 7.5.0 - PHP Object Injection vulnerability
Administrator PHP Object Injection in Complianz = 7.5.0 versions...
CVE-2026-65493 WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...
EUVD-2026-48104
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...