92122 matches found
CVE-2026-65485: Missing Authorization
Unauthenticated Broken Access Control in Content Control = 2.6.5 versions...
CVE-2026-65478: Missing Authorization
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65469: Missing Authorization
Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...
CVE-2026-65464: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65457: Missing Authorization
Subscriber Broken Access Control in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-65455: Unrestricted Upload of File with Dangerous Type
Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...
CVE-2026-65449: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
CVE-2026-64812: Missing Authentication for Critical Function
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...
CVE-2026-64808: Inclusion of Functionality from Untrusted Control Sphere
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tooling...
CVE-2026-61948: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-59555: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...
CVE-2026-59554: Weak Authentication
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59544: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
CVE-2026-59522: Missing Authorization
Subscriber Broken Access Control in WP ERP = 1.17.5 versions...
CVE-2026-57767: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57735: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...
CVE-2026-52686: Improper Verification of Cryptographic Signature
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
CVE-2026-59545: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...
CVE-2026-65482: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows DOM-Based XSS.This issue affects LA-Studio Element Kit for Elementor: from n/a through 1.6.3...