92235 matches found
CVE-2026-34891: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in IDPay Payment Gateway for Woocommerce = 2.2.5 versions...
CVE-2026-34886: Missing Authorization
Unauthenticated Broken Access Control in Simple Membership = 4.7.1 versions...
CVE-2026-27407: Incorrect Privilege Assignment
Editor Privilege Escalation in AI Engine = 3.4.9 versions...
CVE-2026-27333: Deserialization of Untrusted Data
Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site = 7.3.23 versions...
CVE-2026-27089: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in WpTravelly = 2.1.7 versions...
CVE-2026-25440: Missing Authorization
Unauthenticated Broken Access Control in Essential Addons for Elementor 6.6.0 versions...
CVE-2026-25425: Missing Authorization
Unauthenticated Broken Access Control in User Registration = 5.1.2 versions...
CVE-2025-68840: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in iRobots.txt SEO = 1.1.2 versions...
CVE-2025-68049: Missing Authorization
Subscriber Broken Access Control in bunny.net = 2.3.6 versions...
CVE-2025-59133: Authorization Bypass Through User-Controlled Key
Custom role Insecure Direct Object References IDOR in Projectopia = 5.1.25.2 versions...
CVE-2026-50876: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Deck9 Input v2.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2026-38062: Improper Neutralization of Special Elements used in an OS Command
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetratmode via the ratMode parameter...
CVE-2026-30120: Improper Control of Generation of Code
remotion-dev remotion v4.0.409 was discovered to contain a remote code execution RCE vulnerability...
CVE-2025-15659: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Elizaibots = 1.0.2 versions...
CVE-2026-5233: Improper Control of Interaction Frequency
Improper Control of Interaction Frequency vulnerability in MIA Technology Inc. Pizzy Library allows Flooding. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250...
CVE-2026-5230: Improper Access Control
Improper Access Control, Missing Authorization vulnerability in MIA Technology Inc. Pizzy Library allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pizzy Library: from 1.0.0.26250 before 1.3.9.26250...
CVE-2026-49111: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in ThemeGrill Masteriyo - LMS allows Privilege Escalation. This issue affects Masteriyo - LMS: from n/a through 2.2.0...
CVE-2026-40732: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Notification for Telegram = 3.5 versions...