3140 matches found
CVE-2018-7846
CVE-2018-7846 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...
CVE-2026-15354
The ACPT Premium plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.66. This is due to missing authorization in the submit function, which allows unauthenticated form submissions to control the target user ID before calling wpupdateuser. This make...
EUVD-2026-70920
The ACPT Premium plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.66. This is due to missing authorization in the submit function, which allows unauthenticated form submissions to control the target user ID before calling wpupdateuser. This make...
CVE-2026-15354
CVE-2026-15354 is a Privilege Escalation vulnerability in the ACPT (Premium) WordPress plugin, affecting all versions up to and including 2.0.66 . The root cause is a missing authorization check in the submit() function, where the acpt_form_post_id parameter allows unauthenticated form submission...
PT-2026-85405
The ACPT Premium plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.66. This is due to missing authorization in the submit function, which allows unauthenticated form submissions to control the target user ID before calling wp update user. This...
CVE-2026-84238
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-84238 WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
EUVD-2026-70563
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-10821
The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...
CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...
EUVD-2026-70033
The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...
CVE-2026-10821
Yoast SEO Premium WordPress plugin before 27.6.1 fails to sanitize control characters from redirect origins before writing them to the site's Apache .htaccess file when file-based redirect mode is enabled. Because the redirect-creation endpoint is accessible to users with Author-level access, an ...
CVE-2026-10821 Yoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCE
The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level...
EUVD-2026-69832
The Booking for Appointments and Events Calendar – Amelia Premium plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set...
CVE-2026-9055
CVE-2026-9055 affects the Amelia (Premium) booking plugin for WordPress in versions 8.0 through 9.6.2 , rated CVSS 9.8 (Critical) . The root cause is insufficient validation of the attacker-controlled type parameter in the customer update endpoint: when externalId is set to 0, a customer can set ...
CVE-2026-9055 Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
The Booking for Appointments and Events Calendar – Amelia Premium plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set...
PT-2026-84598
Name of the Vulnerable Software and Affected Versions Booking for Appointments and Events Calendar – Amelia Premium versions 8.0 through 9.6.2 Description Insufficient validation of the type parameter in the customer update endpoint allows unauthenticated attackers to escalate privileges. By...
CVE-2026-66598
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...