24487 matches found
EUVD-2026-53285
The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the createpost function in all versions up to, and including, 2.3.0. This is due to the rbsmsubmitpost AJAX action being registered for unauthenticated users via...
CVE-2026-55998
The CVE describes an unauthenticated import endpoint vulnerability: /v3/import/{token}_{clusterId}.yaml returns 502 for valid cluster IDs that reference clusters with private registry secrets due to a null pointer dereference in pkg/systemtemplate/private_registry.go ; non-existent cluster IDs re...
CVE-2026-4431
The CVE-2026-4431 entry concerns the Easy Post Submission WordPress plugin (up to version 2.3.0). A missing capability check on create_post() enables an unauthenticated actor to invoke the rbsm_submit_post AJAX action (registered via wp_ajax_nopriv_rbsm_submit_post) without authorization when a p...
GHSA-3CG5-48J3-V4GV
creationtimestamp| type| source ---|---|--- 2026-08-04 21:31:22+00:00| seen| https://gist.github.com/alon710/e57220ec033758e1c7ba8d20ade18b9d...
CVE-2026-0163
creationtimestamp| type| source ---|---|--- 2026-08-04 19:21:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117038861597097181 2026-08-04 21:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwhpxgff2u...
CData API Server < 23.4.8844 - Path Traversal
A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...
SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure
A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...
Emlog Pro v2.1.14 - Cross-Site Scripting
Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. id: CVE-2023-41621 info: name: Emlog Pro v2.1.14 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross Site Scripting XSS vulnerability in Emlog Pro v2.1.14 via /admin/store.php. impact: ...
Reprise License Manager 14.2 - Cross-Site Scripting
Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. id: CVE-2021-45422 info: name: Reprise License Manager 14.2 - Cross-Site Scripting author: edoardottt severity: medium description: | Reprise License Manager 14.2...
WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting
WordPress Post Status Notifier Lite plugin before 1.10.1 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...
SuperWebMailer 9.00.0.01710 - Cross-Site Scripting
An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...
CVE-2026-6837
creationtimestamp| type| source ---|---|--- 2026-08-04 14:06:53+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msb6peubta2r 2026-08-04 14:06:56+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117037623751892634...
CVE-2026-18612
creationtimestamp| type| source ---|---|--- 2026-08-04 12:16:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msayjnlhrc2j 2026-08-04 12:16:19+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117037188953476018 2026-08-04 16:00:44+00:00| seen|...
GHSA-22JQ-VG5J-6VGG
creationtimestamp| type| source ---|---|--- 2026-08-04 10:32:20+00:00| seen| https://gist.github.com/alon710/539d26ece962aef59230f2218cc50bae...
CVE-2026-58061
creationtimestamp| type| source ---|---|--- 2026-08-04 09:28:17+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/117036528234088485...
GHSA-3F7W-8RR8-F37F
creationtimestamp| type| source ---|---|--- 2026-08-04 08:31:39+00:00| seen| https://gist.github.com/alon710/e29226c330282c9416a9859028fe2877...
CVE-2026-15958
creationtimestamp| type| source ---|---|--- 2026-08-04 07:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117036064825025921 2026-08-04 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbpnktkd32f...
CVE-2026-12698
CVE-2026-12698 affects the wpForo Forum WordPress plugin pre-3.1.3. The vulnerability arises because the plugin does not restrict which profile fields a member may set when editing their own account, enabling a subscriber-level user to write administrator-controlled fields (including account-stat...
