Lucene search
+L

21609 matches found

Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.12 views

PT-2026-87144

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

5.7AI score0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/08 12:00 a.m.5 views

CVE-2026-79570

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

5.7AI score0.00321EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 12:00 a.m.7 views

EUVD-2026-74263

U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...

5.7AI score0.00105EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/07 2:16 p.m.6 views

CVE-2026-14444

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS0.00214EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/07 1:28 p.m.8 views

CVE-2026-14444 WP Fusion (Pro) <= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS5.8AI score0.00214EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/07 1:28 p.m.18 views

CVE-2026-14444

CVE-2026-14444 is a Privilege Escalation vulnerability in the WP Fusion (Pro) WordPress plugin, affecting all versions up to and including 3.47.13 . The root cause is insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart() function. Authenticate...

7.5CVSS5.8AI score0.00214EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/07 1:28 p.m.8 views

EUVD-2026-72403

The WP Fusion Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.47.13. This is due to insufficient authorization checks on the role parameter in the ThriveCart Auto Login handler's thrivecart function. This makes it possible for authenticated...

7.5CVSS5.8AI score0.00214EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.15 views

PT-2026-86582

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/09/07 12:00 a.m.8 views

PT-2026-86621

A flaw has been found in sfturing ssm pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. Affected is an unknown function of the file ssm pro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Endpoint. This manipulation of the argument hospitalName/officesName/doctorName...

5.3CVSS3.9AI score0.00263EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/09/06 1:56 p.m.20 views

Exploit for CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthentica...

9.8CVSS6.3AI score0.00888EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2026/09/06 12:00 a.m.18 views

PT-2026-86476

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro del.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and migh...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/05 8:16 a.m.20 views

CVE-2026-81543

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

8.8CVSS0.00246EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/05 7:38 a.m.10 views

EUVD-2026-71935

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

8.8CVSS5.3AI score0.00246EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/09/05 7:38 a.m.5 views

CVE-2026-81543 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

8.8CVSS5.6AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/05 7:38 a.m.31 views

CVE-2026-81543

Abandoned Cart Pro for WooCommerce plugin for WordPress is affected by a Missing Authorization vulnerability in versions up to and including 10.7.1 . The root cause is the absence of capability checks and nonce verification on multiple AJAX actions (wcap_save_connector_settings, wcap_send_manual_...

8.8CVSS5.3AI score0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/05 7:38 a.m.49 views

CVE-2026-81543 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcapsaveconnectorsettings, wcapsendmanualemail,...

8.8CVSS0.00246EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/09/05 6:38 a.m.21 views

Exploit for CVE-2026-32475

CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary F...

9CVSS7.3AI score0.02374EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/09/05 6:23 a.m.16 views

Exploit for CVE-2026-32475

CVE-2026-32475 — Elementor Pro Forms unauthenticated arbitrary...

9CVSS6.8AI score0.02374EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2026/09/05 12:00 a.m.19 views

PT-2026-86363

The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. This is due to missing capability checks and nonce verification on multiple AJAX actions including wcap save connector settings, wcap send manual email,...

8.8CVSS5.3AI score0.00246EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/09/04 7:25 p.m.10 views

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability

Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Abandoned Cart Pro for WooCommerce versions = 10.7.1...

8.8CVSS5.4AI score0.00246EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder