Lucene search
+L

2376 matches found

RedhatCVE
RedhatCVE
•added 2026/04/03 10:57 a.m.•15 views

CVE-2026-5032

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS6.3AI score0.02659EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/02 8:16 a.m.•15 views

CVE-2026-5032

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS0.02659EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/02 7:39 a.m.•6 views

CVE-2026-5032 W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS5.8AI score0.02659EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/02 7:39 a.m.•7 views

CVE-2026-5032

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS6.4AI score0.02659EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/02 7:39 a.m.•47 views

CVE-2026-5032 W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS0.02659EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/02 7:39 a.m.•58 views

CVE-2026-5032

CVE-2026-5032 affects the WordPress plugin W3 Total Cache (versions

7.5CVSS6.4AI score0.02659EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/04/02 7:21 a.m.•17 views

WordPress W3 Total Cache plugin <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header vulnerability

Unauthenticated Security Token Exposure via User-Agent Header vulnerability discovered by wesley wcraft in WordPress Plugin W3 Total Cache versions = 2.9.3...

7.5CVSS5.9AI score0.02659EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/02 5:04 a.m.•15 views

CVE-2026-30573

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•1 views

CVE-2026-5032: Exposure of Sensitive Information to an Unauthorized Actor

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3 Total Cache", which causes raw...

7.5CVSS6.4AI score0.02659EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•21 views

WordPress plugin W3 Total Cache 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.5CVSS5.8AI score0.02659EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/01 3:31 p.m.•15 views

EUVD-2026-17901

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits1References2
CVE
CVE
•added 2026/04/01 12:00 a.m.•33 views

CVE-2026-30573

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0. The vulnerability is located in the add-sales.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters, allowing attackers to submit negative values for sales...

7.5CVSS5.9AI score0.00382EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2026/04/01 12:00 a.m.•21 views

SourceCodester Pharmacy Product Management System 安全漏洞

SourceCodester Pharmacy Product Management System is an open-source medication management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Product Management System contains a security vulnerability. This vulnerability arises from the fact that the add-sales.php file...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•21 views

SourceCodester Pharmacy Product Management System 安全漏洞

SourceCodester Pharmacy Product Management System is an open-source drug management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Product Management System contains a security vulnerability. This vulnerability arises from the add-stock.php file, which does not...

7.5CVSS5.8AI score0.00382EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•13 views

CVE-2026-27044

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00518EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/25 5:16 p.m.•20 views

CVE-2026-27044

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS0.00518EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•33 views

CVE-2026-27044

CVE-2026-27044 is reported in Wordfence as a vulnerability in TotalPoll for Polls and Contests (TotalPoll Lite)

9.9CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•7 views

CVE-2026-27044 WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•41 views

CVE-2026-27044 WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS0.00518EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-27044: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through = 4.12.0...

9.9CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Rows per page
Query Builder