91354 matches found
CVE-2026-78258: Missing Authorization
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-78272: Missing Authorization
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-66671: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-78263: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Event Tickets = 5.29.2.1 versions...
CVE-2026-32560: Improper Control of Filename for Include/Require Statement in PHP Program
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
CVE-2026-32559: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
CVE-2026-32556: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...
CVE-2026-32555: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Boost = 2.0.4 versions...
CVE-2026-32554: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2025-26237: Improper Neutralization of Special Elements used in a Command
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2026-78267: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
CVE-2026-66587: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-28151: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-32478: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
CVE-2026-28167: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Super Forms allows Path Traversal. This issue affects Super Forms: from n/a through 6.3.316...
CVE-2026-78284: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in MasterStudy LMS = 3.7.42 versions...
CVE-2026-66623: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...
CVE-2026-28162: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...