Lucene search
+L

23499 matches found

Patchstack
Patchstack
•added 2026/07/23 5:53 a.m.•13 views

WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Expatch in WordPress Plugin Dokan Pro versions = 5.0.2...

7.5CVSS5.9AI score0.004EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/07/23 5:50 a.m.•12 views

WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Dokan Pro versions = 5.0.0...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•14 views

PT-2026-63915

Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...

7.1CVSS5.8AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•22 views

PT-2026-63916

Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...

7.5CVSS5.2AI score0.00426EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•2 views

CVE-2026-57370: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•1 views

CVE-2026-57767: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...

7.1CVSS5.7AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•0 views

CVE-2026-65495: Missing Authorization

Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...

7.5CVSS5.7AI score0.00426EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•1 views

CVE-2026-65492: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•2 views

CVE-2026-61972: Missing Authorization

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

5.3CVSS5.7AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•26 views

PT-2026-63831

Unauthenticated Cross Site Scripting XSS in Real Estate Manager Pro = 12.8.5 versions...

7.1CVSS5.1AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•16 views

PT-2026-63869

Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...

5.3CVSS5.2AI score0.00294EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•1 views

CVE-2026-64874: Exposure of Sensitive Information to an Unauthorized Actor

Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs...

9.8CVSS5.7AI score0.00522EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•18 views

PT-2026-63837

Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...

7.1CVSS5.1AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•25 views

PT-2026-63822

Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•21 views

PT-2026-63823

Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...

7.1CVSS5.1AI score0.00251EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/07/23 12:00 a.m.•11 views

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.8AI score0.00824EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/23 12:00 a.m.•15 views

The vulnerability of the Local Mail Transfer Protocol (LMTP) used by Dovecot and OX Dovecot Pro mail servers, which is related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Local Mail Transfer Protocol LMTP used by Dovecot and OX Dovecot Pro mail servers involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

5.3CVSS5.9AI score0.00402EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/23 12:00 a.m.•15 views

The vulnerability of Dovecot and OX Dovecot Pro mail servers, related to improper control of resource identifiers (“resource injection”), allows attackers to cause service failures.

The vulnerability of Dovecot and OX Dovecot Pro mail servers is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.8AI score0.00234EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2026/07/23 12:00 a.m.•11 views

The vulnerability of the dovecot-acl file in Dovecot and OX Dovecot Pro mail servers, due to access control deficiencies, allows attackers to trigger service interruptions.

The vulnerability of the dovecot-acl file of Dovecot and OX Dovecot Pro is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.3CVSS6.1AI score0.0029EPSS
SaveExploits0References9Affected Software6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•2 views

CVE-2026-65493: Deserialization of Untrusted Data

Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...

7.5CVSS5.7AI score0.004EPSS
SaveExploits0References2
Rows per page
Query Builder