3377 matches found
Premium Addons for Elementor - Unauthenticated Information Disclosure
Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...
EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure
EventPrime WordPress plugin 4.3.6.1 contains a broken access control vulnerability caused by improper handling of Pending Review post status, letting unauthenticated users view non-public content awaiting review, exploit requires no authentication. id: CVE-2026-118523 info: name: EventPrime 4.3.6...
CVE-2017-18019
CVE-2017-18019 Under Construction : Please come back later...
Statement
Statement Regarding the CVE-2021-36593 and CVE-2021-36594, I would like to mention that I only had submitted a request to split the CVE-ID. 2 years ago The CVE-IDs will be published in the coming months as there is currently no available update. We have postponed the publishing process for the ti...
WordPress Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin < 8.11 - Subscriber+ Other Users' Pending Listing Publication vulnerability
Subscriber+ Other Users' Pending Listing Publication vulnerability discovered by GivMeInJ in WordPress Plugin Directorist versions 8.11...
CVE-2014-8609-exploit
CVE-2014-8609-exploit During the study of pending intent exploitation, I created my PoC application of CVE-2014-8609 Reference: 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...
WordPress Community Events plugin < 1.6.0 - Unauthenticated Pending Events Disclosure vulnerability
Unauthenticated Pending Events Disclosure vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Community Events versions 1.6.0...
CVE-2026-118523
The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review...
WordPress EventPrime plugin < 4.3.6.1 - Unauthenticated Pending Post Disclosure vulnerability
Unauthenticated Pending Post Disclosure vulnerability discovered by wellknown.info in WordPress Plugin EventPrime versions 4.3.6.1...
CVE-2026-118523
The EventPrime WordPress plugin (versions before 4.3.6.1 ) contains a vulnerability that fails to keep the built-in Pending Review post status non-public. This flaw allows unauthenticated users to view posts, pages, and other content that are currently awaiting review. This vulnerability falls un...
EUVD-2026-116736
The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review...
CVE-2026-118523 EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure via Public Post Status Override
The EventPrime WordPress plugin before 4.3.6.1 does not keep the built-in Pending Review post status non-public, allowing unauthenticated users to view posts, pages and other content that are awaiting review...
EUVD-2026-116592
ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name fr...
PT-2026-136869
Name of the Vulnerable Software and Affected Versions EventPrime versions prior to 4.3.6.1 Description Broken access control allows unauthenticated users to view posts, pages, and other content that are set to the Pending Review status, which should remain non-public. Recommendations Update...
CVE-2026-121734
ZaneOps 1.14.0 before 1.15.2 contains an authorization bypass vulnerability that allows any workspace administrator to read another workspace's pending preview environment by querying ReviewPreviewEnvDeployAPIView without project scoping. Attackers can use the project slug and environment name fr...
PT-2026-136080
In the Linux kernel, the following vulnerability has been resolved: pid namespace: prevent TIF NOTIFY SIGNAL from interrupting the reaper Since commit 7fea700e04bd "zap pid ns processes: clear TIF NOTIFY SIGNAL along with TIF SIGPENDING" zap pid ns processes clears TIF NOTIFY SIGNAL before every...
CVE-2025-2404
CVE-2025-2404 Official publication by USOM is expected...
CVE-2026-Pending-Claude-Desktop-RCE
This repository does not have a README...