Lucene search
+L

58985 matches found

CNNVD
CNNVD
added 2026/04/16 12:0 a.m.14 views

WordPress plugin Barcode Scanner 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 11:25 p.m.17 views

CVE-2026-4880

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/15 11:25 p.m.15 views

CVE-2026-4880

The CVE concerns the WordPress plugin Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS, affected up to version 1.11.0. The root cause is insecure token-based authentication where the plugin trusts a user-supplied Base64-encoded user ID in the token parameter to ide...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/15 11:25 p.m.6 views

CVE-2026-4880 Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/04/15 11:25 p.m.49 views

CVE-2026-4880 Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS0.00503EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/04/15 4:35 p.m.144 views

Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20127 Scanner Overview This project is a Windows-based...

10CVSS7.4AI score0.88243EPSS
SaveExploits10
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.16 views

PT-2026-33185

The Barcode Scanner +Mobile App – Inventory manager, Order fulfillment system, POS Point of Sale plugin for WordPress is vulnerable to privilege escalation via insecure token-based authentication in all versions up to, and including, 1.11.0. This is due to the plugin trusting a user-supplied...

9.8CVSS5.8AI score0.00503EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/04/14 4:45 a.m.109 views

Vulnerable-Web-App-Scanner

Vulnerable-Web-App-Scanner Pent...

5.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2019-25695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting malicious input into the GUI Preferences...

8.6CVSS6.6AI score0.00191EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/04/13 12:0 a.m.8 views

Marimo Vulnerable Version Scanner

Marimo versions prior to 0.23.0 suffer from a remote code execution vulnerability. This tool scans the version to see if your installation is susceptible but does not provide any exploitation functionality...

9.3CVSS6.4AI score0.96576EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2026/04/12 8:59 p.m.126 views

SkillCyberPunk

Security Vulnerability Scanner A Claude Code plugin that auto...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/12 7:27 p.m.129 views

web-pentest-tool

🛡️ AutoPenTest — Automated Penetration Testing Tool ⚠️ DI...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/04/11 2:51 a.m.12 views

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, crossplane-provider-azure-authorization, libnvidia-container, terraform-provider-tls, newrelic-fluent-bit-output, docker-machine-driver-linode, memcached-exporter, sftpgo-plugin-auth, envoy-ratelimit, lazydocker, eksctl,...

5.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/11 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-4151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

7.8CVSS7.6AI score0.00664EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/04/10 11:7 a.m.133 views

Exploit for Deserialization of Untrusted Data in Facebook React

markdown Summary CVE-2025-55182 Scanner is a high-perfor...

10CVSS7AI score0.99616EPSS
SaveExploits382
Wordfence Blog
Wordfence Blog
added 2026/04/09 6:12 p.m.17 views

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 30, 2026 to April 5, 2026)

Last week, there were 56 vulnerabilities disclosed in 50 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 38 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...

6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-5899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in History Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specif...

6.1CVSS6.7AI score0.00134EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/09 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-5885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive...

6.5CVSS6.8AI score0.00237EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/04/08 5:27 a.m.134 views

H4C-WEB

H4C-WEB !/bin/bash =======================================...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/06 9:40 a.m.133 views

vuln-Scanner

...

5.9AI score
SaveExploits0
Rows per page
Query Builder