92235 matches found
CVE-2026-22328: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Auto Repair = 22.6 versions...
CVE-2026-40726: Missing Authorization
Unauthenticated Broken Access Control in User Registration Stripe = 1.3.14 versions...
CVE-2025-69107: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Rosaleen = 2.8 versions...
CVE-2026-45436: Missing Authorization
Subscriber Broken Access Control in WPBakery Page Builder = 8.7.2 versions...
CVE-2026-54819: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This issue affects Listdom: from n/a through 5.4.0...
CVE-2026-25439: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
CVE-2026-22338: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in EcoBlue = 1.15 versions...
CVE-2025-69140: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SweetDate Core 1.1.5 versions...
CVE-2026-25470: Improper Control of Generation of Code
Unauthenticated Remote Code Execution RCE in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.47 versions...
CVE-2025-69164: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Skyward = 1.10 versions...
CVE-2025-69158: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
CVE-2025-69119: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Corbesier = 1.15.0 versions...
CVE-2026-54802: Missing Authorization
Unauthenticated Broken Authentication in SMS Alert Order Notifications = 3.9.3 versions...
CVE-2025-69150: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Medeus = 1.14 versions...
CVE-2026-0081: Undefined Security Weakness
In NFC, there is a possible way to spoof an NFC event due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-40748: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in Kids Gift Shop = 0.5.4 versions...
CVE-2025-59554: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Advanced Ads – Tracking 3.0.7 versions...
CVE-2025-69105: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Modernee = 1.6.0 versions...
WordPress Plugin: integrate-google-drive: CVE-2024-32949: Missing Authorization
Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Integrate Google Drive: from n/a through 1.3.8...