12680 matches found
EUVD-2025-210140
Contributor Cross Site Scripting XSS in Elizaibots = 1.0.2 versions...
CVE-2025-15658 WordPress WP Emmet plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability
Administrator Cross Site Scripting XSS in WP Emmet = 0.3.4 versions...
CVE-2025-15658 WordPress WP Emmet plugin <= 0.3.4 - Cross Site Scripting (XSS) vulnerability
Administrator Cross Site Scripting XSS in WP Emmet = 0.3.4 versions...
CVE-2026-49062
CVE-2026-49062 concerns the WordPress plugin Faust.js (faustwp)
CVE-2026-49062 WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7...
WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by l3m3s in WordPress Plugin WP Event SOlution versions = 4.1.12...
WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.5...
CVE-2026-12213
A vulnerability was found in hcengineering Huly Platform up to 0.7.0. Affected by this vulnerability is the function getAccountInfo of the file server/account/src/operations.ts of the component User Information Handler. The manipulation results in improper authorization. The attack may be launche...
CVE-2026-12206
Grit42 Grit (up to 0.11.0) contains a SQL injection in Grit::Assays::DataTableEntity (modules/assays/backend/app/models/grit/assays/data_table_entity.rb). The issue can be exploited remotely; a publicly available exploit exists. The vendor was contacted but did not respond. No remediation or vers...
PT-2026-49506
Unauthenticated Broken Access Control in Knit Pay = 9.4.0.0 versions...
PT-2026-49516
Name of the Vulnerable Software and Affected Versions Dokan versions prior to 5.0.3 Description A privilege escalation issue exists that allows a user with customer privileges to gain higher access levels. Recommendations Update to a version later than 5.0.2...
PT-2026-49523
Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...
PT-2026-49429
Subscriber Insecure Direct Object References IDOR in KiviCare = 4.2.1 versions...
PT-2026-49520
Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout = 1.8.2 versions...
PT-2026-49443
Unauthenticated Cross Site Scripting XSS in Favicon Rotator = 1.2.11 versions...
PT-2026-49419
Unauthenticated Broken Access Control in Royal MCP = 1.4.2 versions...
PT-2026-49494
Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...
PT-2026-49454
Unauthenticated Cross Site Scripting XSS in Simple Membership = 4.7.2 versions...
PT-2026-49484
Name of the Vulnerable Software and Affected Versions Visual Link Preview versions prior to 2.4.2 Description An issue in the plugin leads to the exposure of sensitive subscriber data. Recommendations Update to version 2.4.2 or later...