14721 matches found
CVE-2025-69133
Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...
EUVD-2025-210402
Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...
EUVD-2025-210401
Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...
CVE-2025-69132
Technical details about CVE-2025-69132 are not publicly available in the provided documents. Please monitor sources for updates regarding affected product versions, root cause, impact, and remediation.
CVE-2025-69132 WordPress Corpkit theme <= 1.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...
CVE-2025-69132
Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...
CVE-2025-69132 WordPress Corpkit theme <= 1.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Corpkit = 1.0.5 versions...
EUVD-2025-210400
Subscriber SQL Injection in Unicamp = 2.2.2 versions...
CVE-2025-69094 WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability
Subscriber SQL Injection in Unicamp = 2.2.2 versions...
CVE-2025-69094 WordPress Unicamp theme <= 2.2.2 - SQL Injection vulnerability
Subscriber SQL Injection in Unicamp = 2.2.2 versions...
CVE-2025-69094
Subscriber SQL Injection in Unicamp = 2.2.2 versions...
CVE-2026-12134
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-12134 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-12134
The CVE concerns the WordPress plugin JoomSport – for Sports: Team & League, Football, Hockey & more (up to and including version 5.7.8). It describes an authorization bypass where authenticated users with subscriber-level access and above can create arbitrary season groups or modify group names,...
EUVD-2026-41265
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.7.8. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
PT-2026-54996
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
PT-2026-55022
Subscriber Server Side Request Forgery SSRF in GeoDirectory = 2.8.161 versions...
CVE-2026-27419: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in Zegen = 1.1.9 versions...