49970 matches found
Open Redirect
Snipe-IT is vulnerable to Open Redirect. The vulnerability is due to improper trust of the attacker-controlled Referer header, where the previous URL is stored in the session and later used for redirection without validation, allowing attackers to redirect users to malicious websites after a...
WordPress GEO Plugin by Squirrly SEO plugin <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting vulnerability
Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Plugin SEO Plugin by Squirrly SEO versions = 14.0.0...
CVE-2026-12978
creationtimestamp| type| source ---|---|--- 2026-07-16 07:55:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqr3rj5be2u...
CVE-2026-15407 Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action
The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-15407 Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action
The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.7.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-15407
The CVE-2026-15407 entry describes an authorization bypass in Themify Builder for WordPress up to version 7.7.7. The underlying issue is insufficient verification of a user’s authorization for actions performed via the tb_generate_on_fly AJAX action, enabling authenticated users with subscriber-l...
CVE-2026-12395
creationtimestamp| type| source ---|---|--- 2026-07-16 07:50:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqsfnohs22...
CVE-2026-12906
creationtimestamp| type| source ---|---|--- 2026-07-16 07:45:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqkgc65d22...
CVE-2026-15306
creationtimestamp| type| source ---|---|--- 2026-07-16 07:41:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqqdhqwci2a...
CVE-2026-12906 RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title Disclosure
The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...
CVE-2026-12906
The RTMKit WordPress plugin (specifically RTMKit Addons for Elementor ) before version 2.0.9 is vulnerable to an authorization bypass. The root cause is a missing capability check within one of its AJAX actions , which allows the plugin to resolve a request-supplied post identifier directly. Cons...
CVE-2026-12906 RTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title Disclosure
The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...
CVE-2026-12906
The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...
EUVD-2026-44879
The RTMKit WordPress plugin before 2.0.9 does not perform a capability check in one of its AJAX actions and resolves a request-supplied post identifier directly, allowing users with at least the Contributor role to read the titles of other users' private, draft, pending, scheduled and trashed pos...
CVE-2026-12409
The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.3.6. This is due to missing or incorrect nonce validation on the ulpbadminajax function. Thi...
CVE-2026-12941
creationtimestamp| type| source ---|---|--- 2026-07-16 04:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqehp3ecv2m...
CVE-2026-12434
creationtimestamp| type| source ---|---|--- 2026-07-16 04:00:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqdx2slhz2m...
CVE-2026-48257
creationtimestamp| type| source ---|---|--- 2026-07-16 03:52:54+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjz5pqq2q...
CVE-2026-15336
creationtimestamp| type| source ---|---|--- 2026-07-16 03:50:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqqdexyob522...
CVE-2026-12409 Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action
The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.3.6. This is due to missing or incorrect nonce validation on the ulpbadminajax function. Thi...