59047 matches found
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...
Exploit for Eval Injection in Langflow
CVE-2026-33017 — Langflow Unauthenticated RCE PoC 면책 조항...
EUVD-2026-57916
Unauthenticated Broken Access Control in User Registration = 5.2.6 versions...
EUVD-2026-57915
Unauthenticated Broken Access Control in InstaWP Connect = 0.1.3.7 versions...
CVE-2026-73403
The CVE-2026-73403 entry concerns the WordPress User Registration plugin (versions ≤ 5.2.6) with unauthenticated broken access control in its registration flow. Affected software: WordPress User Registration plugin; vulnerable component: registration/authentication logic described as enforcing br...
CVE-2026-66704
CVE-2026-66704 affects the WordPress Gutenverse Companion plugin, version
CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658
CVE-2026-66658 affects WordPress Reviewer plugin versions ≤ 3.14.2. The issue is described as a SQL Injection vulnerability (Subscriber SQL Injection) with CVSS 3.1, base score 8.5 (HIGH), vector: NETWORK/attackVector N, AC:L, PR:L, UI:N, S:C, C:H, I:N, A:L. Connected sources include CVE records ...
EUVD-2026-57896
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
EUVD-2026-57895
Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...
CVE-2026-66657
The CVE-2026-66657 entry describes an Unauthenticated Local File Inclusion in the WordPress Biagiotti Core plugin, versions
CVE-2026-66655 WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...
CVE-2026-66478
The CVE 2026-66478 refers to an unauthenticated SQL Injection in the WordPress plugin Church Admin (versions
CVE-2026-66472 WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability
Unauthenticated SQL Injection in Everest Backup = 2.3.12 versions...
EUVD-2026-57891
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...