Astra Linux - vulnerability in qtdeclarative-opensource-src

Unlimited resource allocation or throttling; improper validation of specified quantities in input fields leads to excessive allocation in the Qt Company’s Qt framework on Windows, MacOS, Linux, iOS, Android, x86, ARM, 64-bit, and 32-bit platforms. This issue affects users of the Text component in...

CVE-2026-94370

A flaw was found in Qt for MCUs. When an application processes text through the Qt Quick Ultralite string interface, memory references are copied without transferring ownership. This condition causes the application to improperly release or reuse memory, leading to heap memory corruption. An...

CVE-2026-108492

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

portal-kampus-itsm

Portal Akademik Terpadu — Institut Teknologi & Sains Mandiri...

CVE-2026-108492 WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

CVE-2026-108492

The Quick Paypal Payments plugin for WordPress (versions n/a through 6.0.3 ) is vulnerable to a Broken Access Control issue (CWE-862). The vulnerability stems from Missing Authorization , specifically allowing for the exploitation of incorrectly configured access control security levels within th...

CVE-2026-108492 WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

EUVD-2026-98349

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

WordPress Quick Paypal Payments plugin <= 6.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Quick Paypal Payments versions = 6.0.3...

PT-2026-111322

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

CVE-2026-108492: Missing Authorization

Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 6.0.3...

VulnCheck KEV: CVE-2026-1830

The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated...

WordPress Quick quotes plugin <= 1.0.0 - Unauthenticated Integer-Value Option Update vulnerability

Unauthenticated Integer-Value Option Update vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Quick quotes versions = 1.0.0...

WordPress Mindstien Quick Login plugin <= 1.0 - Unauthenticated Administrator Account Takeover vulnerability

Unauthenticated Administrator Account Takeover vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Mindstien Quick Login versions = 1.0...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

CVE-2026-86706

The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to alter arbitrary site settings and to make the site unavailable...

CVE-2026-84734

The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as the administrator account the Mindstien Quick Login WordPress...

CVE-2026-86706 Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to alter arbitrary site settings and to make the site unavailable...

CVE-2026-86706

The Quick quotes WordPress plugin, in versions through 1.0.0 , is vulnerable to an unauthenticated integer-value option update due to a missing capability and nonce check on an AJAX action . This flaw allows unauthenticated users to specify which option to write, enabling them to alter arbitrary ...

EUVD-2026-96766

The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to alter arbitrary site settings and to make the site unavailable...