92122 matches found
CVE-2026-59512: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Product Enquiry for WooCommerce = 2.2.34.43 versions...
CVE-2026-65501: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
CVE-2026-61951: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions...
CVE-2026-61945: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...
CVE-2026-65529: Missing Authorization
Missing Authorization vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Graphina – Charts and Graphs For Elementor: from n/a through 3.1.12...
CVE-2026-8287: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...
CVE-2026-34496: Improper Privilege Management
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...
CVE-2026-16002: Out-of-bounds Read
The affected product is vulnerable to an Out-of-bounds read, which may allow an attacker to crash the parsing process and cause a denial of service...
CVE-2026-65516: Server-Side Request Forgery (SSRF)
Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-65511: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...
CVE-2026-65510: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-65505: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65498: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Complianz = 7.5.0 versions...
CVE-2026-65497: Deserialization of Untrusted Data
Administrator PHP Object Injection in Complianz = 7.5.0 versions...
CVE-2026-65907: Improper Control of Generation of Code
In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible...
CVE-2026-65535: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
CVE-2026-65532: Improper Neutralization of Special Elements used in an SQL Command
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-49035: Heap-based Buffer Overflow
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...
CVE-2026-21653: Server-Side Request Forgery (SSRF)
Victor SSRF vulnerability in Johnson Controls CCure 9000 and victor application server allows Server Side Request Forgery. This issue affects CCure 9000 and victor application server: from 2.9 through 3.0...