Lucene search
+L

230 matches found

Nuclei
Nuclei
•added 2026/10/07 2:15 a.m.•56 views

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery

A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can result in an attacker approving themselves as an instructor and performing other malicious actions such as blocking legitimate instructors. id: CVE-2020-8615 info: name: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Reque...

6.5CVSS6.7AI score0.0883EPSS
SaveExploits6References5
NVD
NVD
•added 2026/10/03 3:16 p.m.•19 views

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

8.2CVSS0.00209EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/03 2:00 p.m.•12 views

EUVD-2026-92027

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

8.2CVSS5.9AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 12:17 p.m.•21 views

CVE-2026-92465

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2...

7.6CVSS0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/16 11:29 a.m.•48 views

CVE-2026-92465 WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2...

7.6CVSS0.00383EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/16 11:29 a.m.•20 views

EUVD-2026-80675

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•25 views

CVE-2026-57726

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.3CVSS0.004EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•17 views

CVE-2026-57724

Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.8CVSS0.00564EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•19 views

CVE-2026-57725

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through = 6.0.11...

7.1CVSS0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•18 views

CVE-2026-57727

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through = 6.0.13...

7.5CVSS0.00394EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/13 10:16 a.m.•18 views

CVE-2026-57694

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS0.00335EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•19 views

EUVD-2026-43376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Kirki kirki allows Stored XSS.This issue affects Kirki: from n/a through = 6.0.11...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•11 views

CVE-2026-57724

Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•12 views

CVE-2026-57726

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.3CVSS6.1AI score0.004EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•18 views

EUVD-2026-43373

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through = 6.0.13...

7.5CVSS6.1AI score0.00394EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•23 views

EUVD-2026-43377

Deserialization of Untrusted Data vulnerability in Themeum Kirki kirki allows Object Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.8CVSS6.1AI score0.00564EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•18 views

EUVD-2026-43375

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Kirki kirki allows Blind SQL Injection.This issue affects Kirki: from n/a through = 6.0.12...

9.3CVSS6.1AI score0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/13 8:41 a.m.•17 views

EUVD-2026-43352

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS6.1AI score0.00335EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•10 views

CVE-2026-57694

Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through = 3.9.13...

6.5CVSS6AI score0.00335EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•10 views

CVE-2026-57727

Missing Authorization vulnerability in Themeum Kirki kirki allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kirki: from n/a through = 6.0.13...

7.5CVSS6.1AI score0.00394EPSS
SaveExploits0References2
Rows per page
Query Builder