49569 matches found
CVE-2026-14231 LifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_posts
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...
WordPress Sync Post With Other Site plugin < 1.9.3 - Contributor+ Arbitrary Page Creation/Modification vulnerability
Contributor+ Arbitrary Page Creation/Modification vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Sync Post With Other Site versions 1.9.3...
CVE-2026-14923
The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...
CVE-2026-14923
The Sync Post With Other Site WordPress plugin, in versions prior to 1.9.3 , contains an authorization flaw due to an operator-precedence error . This flaw allows authenticated users with limited privileges, such as a Contributor (who only holds post-editing capabilities), to bypass intended rest...
CVE-2026-66397
creationtimestamp| type| source ---|---|--- 2026-07-30 04:54:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrtniawca42i...
CVE-2026-16727
creationtimestamp| type| source ---|---|--- 2026-07-30 03:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrth53myr32r...
CVE-2025-51684
CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...
PT-2026-66576
Name of the Vulnerable Software and Affected Versions CleverTap Web SDK version 1.15.1 Description Cross Site Scripting XSS occurs because the application fails to sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious...
Deterministic QKD Source Robust against Side-Channel Attacks
Quantum key distribution QKD is secure in principle, but practical security can be undermined by discrepancies between real devices and the idealized models assumed in security proofs. Source side channels, including those exploited by Trojan-horse attacks, are particularly detrimental: neglectin...
CVE-2026-14305: Improper Authentication
The WP Delicious WordPress plugin before 1.10.2 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to modify limited post metadata a like counter and an associated identifier list on arbitrary posts, including inflating the counter and growing the...
CVE-2026-18353: Server-Side Request Forgery (SSRF)
PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...
EUVD-2025-210564
CleverTap Web SDK v1.15.1 is vulnerable to Cross Site Scripting XSS. The application does not sanitize untrusted data received via window.postMessage before injecting it into the page DOM. An attacker can craft a malicious message that, when processed by renderCustomHtml, results in execution of...
CVE-2026-67349: Missing Authentication for Critical Function
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELMVALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMINTOKEN is unset, allowing unauthenticated attackers to modify GCP servic...
PT-2026-66384
The LifterLMS WordPress plugin before 10.0.10 does not perform a capability check in one of its select2 query AJAX handlers, only verifying that the user is logged in, allowing any authenticated user with subscriber-level access to read the titles of internal post types such as coupon codes by...
PT-2026-66391
The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...
CVE-2026-14923: Incorrect Authorization
The Sync Post With Other Site WordPress plugin before 1.9.3 does not correctly enforce the page-editing capability on a REST route that creates and updates posts, because of an operator-precedence flaw in its authorization check. An authenticated user holding only the post-editing capability such...
CVE-2026-67437
creationtimestamp| type| source ---|---|--- 2026-07-29 22:00:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrswdykg4k2w 2026-07-30 16:35:35+00:00| published-proof-of-concept| https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xpxj-f2fm-rqch 2026-07-31...
CVE-2026-63119
creationtimestamp| type| source ---|---|--- 2026-07-29 21:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrsuhri6me23 2026-07-30 16:35:27+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/ruby-sdk/security/advisories/GHSA-7683-3w9x-ch42 2026-07-31...
CVE-2026-67435
creationtimestamp| type| source ---|---|--- 2026-07-29 21:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstx5hkw522 2026-07-31 01:31:12+00:00| seen| https://gist.github.com/alon710/d1939c63ece21d1bd9e89d2add282b5b...