21703 matches found
MINI-4X89-WPGV-QCVV
Bulletin has no description...
MINI-FXH9-24C8-RHM5
Bulletin has no description...
MINI-R974-C7F6-5C7Q
Bulletin has no description...
MINI-JCQX-MFPP-G549
Bulletin has no description...
MINI-F49J-M3C2-CRPW
Bulletin has no description...
MINI-QVFR-7G79-9GF7
Bulletin has no description...
MINI-V3F3-WRVG-C3WG
Bulletin has no description...
MINI-4228-J85G-5RH6
Bulletin has no description...
MINI-M2VG-H5M9-CRPX
Bulletin has no description...
MINI-WJP9-W83C-W2V9
Bulletin has no description...
MINI-X727-MVW3-743F
Bulletin has no description...
MINI-C9HM-RJGF-57GW
Bulletin has no description...
CVE-2026-8611
The Klamra Paycal for Aspaclaria WordPress plugin is vulnerable to Insecure Direct Object Reference through the invoice_id parameter in versions up to 1.1.4, caused by missing validation on a user-controlled key. Authenticated users with subscriber-level access and higher can enumerate post IDs t...
CVE-2026-8611 Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoiceid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
EUVD-2026-34958
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoiceid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
PT-2026-47141
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoice id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
CVE-2026-10038
The Charitable – Donation Plugin for WordPress (Charitable) up to version 1.8.11.1 is affected by an Insecure Direct Object Reference/Authorization Bypass that enables Arbitrary Attachment Deletion via the profile avatar update flow. The issue stems from save_avatar() calling wp_delete_attachment...
CVE-2026-10038
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization Bypass leading to Arbitrary Attachment Deletion in versions up to, and including, 1.8.11.1 via the profile avatar...
CVE-2026-10038 Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parameter
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insecure Direct Object Reference / Authorization Bypass leading to Arbitrary Attachment Deletion in versions up to, and including, 1.8.11.1 via the profile avatar...
MINI-FGP6-RXM8-PV96
Bulletin has no description...