Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/07/28 6:00 a.m.•14 views

EUVD-2026-49702

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages...

7.5CVSS5.9AI score0.0044EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•23 views

PT-2026-65394

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages...

5.9AI score0.0044EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/03/04 12:31 a.m.•14 views

SUSE CVE-2026-0998

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 and Mattermost Plugin Zoom versions =1.11.0 fail to validate user identity and post ownership in the /api/v1/askPMI endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/16 12:30 p.m.•12 views

EUVD-2026-6100

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 and Mattermost Plugin Zoom versions =1.11.0 fail to validate user identity and post ownership in the /api/v1/askPMI endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via...

4.3CVSS5.7AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/16 9:54 a.m.•18 views

CVE-2026-0998 Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 and Mattermost Plugin Zoom versions =1.11.0 fail to validate user identity and post ownership in the /api/v1/askPMI endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via...

4.3CVSS6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/16 9:54 a.m.•8 views

CVE-2026-0998 Mattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls

Mattermost versions 11.1.x = 11.1.2, 10.11.x = 10.11.9, 11.2.x = 11.2.1 and Mattermost Plugin Zoom versions =1.11.0 fail to validate user identity and post ownership in the /api/v1/askPMI endpoint which allows unauthorized users to start Zoom meetings as any user and overwrite arbitrary posts via...

4.3CVSS5.7AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder