50819 matches found
CVE-2026-23970
Unauthenticated Cross Site Scripting XSS in Redirection for Contact Form 7 = 3.2.8 versions...
CVE-2026-25425
Unauthenticated Broken Access Control in User Registration = 5.1.2 versions...
CVE-2025-68851
Unauthenticated Cross Site Scripting XSS in Okay Toolkit = 2.3 versions...
GHSA-RQ7W-G337-39QQ
creationtimestamp| type| source ---|---|--- 2026-06-15 21:11:17+00:00| seen| https://gist.github.com/alon710/be69f9c7f59f396504036ec9a026919b 2026-06-15 21:21:08+00:00| seen| https://gist.github.com/alon710/3a26ff1fbe9d67163f9157e06a925a54...
CVE-2026-48157
Slim PHP framework (versions 4.4.0–4.15) is affected by an HTML/JavaScript injection in error pages when HttpException::setTitle() and/or setDescription() are fed with untrusted data. The issue can occur in HTML error pages generated by Slim and is present even with displayErrorDetails = false; v...
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Summary Netty HTTP/2 max header size handling produces attack similar to HTTP/2 Rapid Reset. Details There is a setting in the http2 specification called SETTINGSMAXHEADERLISTSIZE. According to the RFC: “This advisory setting informs a peer of the maximum field section size that the sender is...
EUVD-2026-36471
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature...
GHSA-563Q-J3CM-6JXM Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Summary Netty HTTP/2 max header size handling produces attack similar to HTTP/2 Rapid Reset. Details There is a setting in the http2 specification called SETTINGSMAXHEADERLISTSIZE. According to the RFC: “This advisory setting informs a peer of the maximum field section size that the sender is...
CVE-2026-49952
creationtimestamp| type| source ---|---|--- 2026-06-15 20:20:35+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3moe4bl2zhh2j 2026-06-15 20:47:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moe5sedrap22 2026-07-13 22:00:24+00:00| seen|...
CVE-2026-52703 WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability
Unauthenticated Path Traversal in FastDup = 2.7.2 versions...
EUVD-2026-37004
Unauthenticated Path Traversal in FastDup = 2.7.2 versions...
EUVD-2026-36901
Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce = 2.0 versions...
EUVD-2026-36899
Unauthenticated Sensitive Data Exposure in Affiliates Manager = 2.9.50 versions...
EUVD-2026-36897
Customer Privilege Escalation in Dokan = 5.0.2 versions...
CVE-2026-49776
CVE-2026-49776 concerns the WordPress GPTranslate plugin, affected versions
CVE-2026-49766
CVE-2026-49766 affects the WordPress plugin WP User Manager (versions ≤ 2.9.16). The vulnerability is described as an Arbitrary File Deletion issue reported for subscribers. The available metrics indicate a CRITICAL impact (CVSS 3.1: 9.9; NETWORK attack vector; LOW privileges required; no user in...
CVE-2026-49061 WordPress WPC Product Options for WooCommerce plugin <= 3.2.1 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce = 3.2.1 versions...
EUVD-2026-36867
Unauthenticated Cross Site Request Forgery CSRF in WP Migrate Lite = 2.7.8 versions...