91207 matches found
CVE-2026-6071: Out-of-bounds Write
A remote code execution security issue exists in the affected products when parsing DOE files that could allow a remote attacker to write past the end of an allocated object and execute code within the context of the current process. To exploit this vulnerability, a legitimate user must visit a...
CVE-2026-84754: Missing Authorization
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
CVE-2026-84755: Missing Authorization
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84215: Missing Authorization
Unauthenticated Broken Access Control in Timetics = 1.0.61 versions...
CVE-2026-81776: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81295: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Under Construction = 5.82 versions...
CVE-2026-81281: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-85307: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve Embedded Sensitive Data. This issue affects KP Agent Ready: from n/a before 1.2.08...
CVE-2026-84848: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84847: Missing Authorization
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84814: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
CVE-2026-84779: Missing Authorization
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84776: Allocation of Resources Without Limits or Throttling
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
CVE-2026-84758: Missing Authorization
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
CVE-2026-82521: Improper Limitation of a Pathname to a Restricted Directory
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
CVE-2026-84834: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84813: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84774: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...