146141 matches found
CVE-2026-73474 Entity Share Websub - Moderately critical - Server-side request forgery (SSRF) - SA-CONTRIB-2026-097
Server-Side Request Forgery SSRF vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity Share Websub versions: from 0.0.0 to 1.1.2...
CVE-2026-73474
The Drupal Entity Share Websub module (versions 0.0.0 through 1.1.2 ) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the insufficient validation of certain inputs , which allows an attacker to coerce the server into making unauthorized requests to internal or external r...
nodejs: Node.js: Request smuggling via HTTP client header truncation
A flaw was found in Node.js. The Node.js HTTP client can cause a request desynchronization in forwarding proxies, potentially leading to request smuggling. This vulnerability arises when the HTTP client omits certain headers, such as Content-Length, from being visible to the proxy application whi...
CVE-2026-84772
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
CVE-2026-84759
Unauthenticated Cross Site Request Forgery CSRF in Activity Log = 2.13.1 versions...
CVE-2026-84764
Unauthenticated Cross Site Request Forgery CSRF in Simply Schedule Appointments = 1.6.12.23 versions...
CVE-2026-84770
Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...
WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jorgson in WordPress Plugin YITH Request a Quote for WooCommerce Premium versions 4.46.0...
CVE-2026-66652 WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1...
EUVD-2026-69943
Cross-Site Request Forgery CSRF vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1...
WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Grand Tour versions = 5.5.1...
EUVD-2026-69940
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
CVE-2026-84772
A Server-Side Request Forgery (SSRF) vulnerability was identified in the Broken Link Checker WordPress plugin, affecting versions ≤ 2.4.14 . The flaw is exploitable by users with Editor privileges, allowing them to forge server-side requests. The CVSS 3.1 score is 5.5 (Medium) with a changed scop...
CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
CVE-2026-84772 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
Editor Server Side Request Forgery SSRF in Broken Link Checker = 2.4.14 versions...
CVE-2026-84770 WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...
EUVD-2026-69938
Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...
CVE-2026-84764
CVE-2026-84764 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Simply Schedule Appointments , affecting versions 1.6.12.23 and below . The flaw was discovered by Anthony Green of Greenhat Security . The assigned CVSS 3.1 score is 8.8 (High) , reflecti...