CVE-2023-47179

CVE-2023-47179 WooODT Lite = 2.4.6 - Missing Authorization to Arbitrary Options Update Subscriber+ Description: The WooODT Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the byconsolewooodtadminfieldssettingfiles function hooked v...

CVE-2024-50490

CVE-2024-50490 PegaPoll = 1.0.2 - Unauthenticated Arbitrary Options Update Description: The PegaPoll plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check in all versions up to, and including, 1.0.2. This...

wpbf

wpbf! wpbf è uno strumento di brute force per testare da remoto la robustezza delle password, l'enumerazione degli utenti e il rilevamento dei plugin su un sito WordPress. Description ^^^^^^^^^^^ Lo script tenterà di accedere alla dashboard di WordPress tramite il modulo di login utilizzando una...

log4j2burpscanner

SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO SOLO PER TEST, NON ATTACCARE NESSUNO Gruppo di discussione Se il QR code non è più valido, aggiungi su WeChat f-f0ng, con nota log4j2burpscanner comunicazione Segui l'account ufficiale della pagina principale only security,...

ghidra-mtk-loader

Loader md1img di MediaTek per Ghidra Loader Ghidra per il formato immagine firmware modem md1img di MediaTek. Attualmente è supportato solo il firmware basato su nanoMIPS, ma le funzionalità di base potrebbero comunque funzionare se si sceglie manualmente un'architettura diversa ad es. MIPS duran...

CVE-2026-107657

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-workhorse-ee-fips, ingress-nginx-controller, tigera-operator, commercial-grafana, commercial-spilo-fips, reports-server, aactl, loki, telegraf, spire-server, kube-conformance, commercial-chainloop-cli, nemo-gym, frankenphp-8.4, nemo, consul-k8s,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GO-2026-6604 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, rancher-agent, opencost, flux, step, k6, grafana-alloy, openbao, gitlab-pages, gitness, zarf, hubble-ui, external-dns, cert-manager, ingress-nginx-controller, cloudprober, juicefs, karpenter, mesosphere-vsphere-csi, rancher,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: falco-no-driver, ingress-nginx-controller, karpenter, kubernetes, loki, flux, cert-manager, aactl, spire-server, k8s-device-plugin, external-dns...

nowafpls

nowafpls Indice nowafpls Limitazioni documentate dei WAF Installazione di nowafpls Uso di nowafpls Autori Licenza nowafpls La maggior parte dei firewall per applicazioni web WAF ha limitazioni sulla quantità di dati che può elaborare quando viene inviato un corpo della richiesta. Ciò significa ch...

CVE-2026-96662

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2026-96563

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stmfs' parameter in all versions up to, and including, 1.4.123 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2026-104728

The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

CVE-2026-100178

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

EUVD-2026-96282

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advertslocation' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-100178

The WPAdverts – Classifieds Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.3.4 . The root cause is insufficient input sanitization and output escaping specifically involving the 'adverts_location' parameter. This flaw allows unauthent...

EUVD-2026-96276

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...