92215 matches found
CVE-2026-65495: Missing Authorization
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65494: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65493: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65491: Missing Authorization
Subscriber Broken Access Control in Query Wrangler = 1.5.57 versions...
CVE-2026-65489: Missing Authorization
Missing Authorization vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.2...
CVE-2026-65486: Missing Authorization
Unauthenticated Broken Access Control in Event post = 6.0.1 versions...
CVE-2026-65487: Missing Authorization
Unauthenticated Broken Access Control in Photography = 7.7.6 versions...
CVE-2026-65485: Missing Authorization
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65483: Improper Neutralization of Input During Web Page Generation
Author Cross Site Scripting XSS in HashThemes Demo Importer = 1.4.2 versions...
CVE-2026-65484: Missing Authorization
Contributor Broken Access Control in Style Kits = 2.6.5 versions...
CVE-2026-65482: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...
CVE-2026-65479: Missing Authorization
Subscriber Broken Access Control in Reviewer = 3.14.2 versions...
CVE-2026-65476: Missing Authorization
Unauthenticated Broken Access Control in Civi = 2.2.4 versions...
CVE-2026-65478: Missing Authorization
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65477: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...
CVE-2026-65474: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...
CVE-2026-65473: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...
CVE-2026-65472: Missing Authorization
Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...