CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

RedhatCVE•added yesterday•3 views

CVE-2026-8689

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14. This is due to a missing capability check on the renderChartPages and uploadData functions, where the wpajaxvisualizer-create-chart an...

4.3CVSS5.6AI score0.00034EPSS

Nuclei•added yesterday•24 views

Visualizer <3.3.1 - Blind Server-Side Request Forgery

Visualizer prior to 3.3.1 suffers from a blind server-side request forgery vulnerability via the /wp-json/visualizer/v1/upload-data endpoint. id: CVE-2019-16932 info: name: Visualizer 3.3.1 - Blind Server-Side Request Forgery author: akincibor severity: critical description: | Visualizer prior to...

10CVSS7.7AI score0.80844EPSS

Exploits2References5

Nuclei•added yesterday•14 views

WordPress Visualizer <3.3.1 - Cross-Site Scripting

WordPress Visualizer plugin before 3.3.1 contains a stored cross-site scripting vulnerability via /wp-json/visualizer/v1/update-chart WP-JSON API endpoint. An unauthenticated attacker can execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard...

6.1CVSS6.4AI score0.01687EPSS

Exploits2References5

Nuclei•added yesterday•24 views

Piano LED Visualizer 1.3 - Local File Inclusion

Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. id: CVE-2022-24900 info: name: Piano LED Visualizer 1.3 - Local File Inclusion author: 0xAkoko severity: high description: | Piano LED Visualizer 1.3 and prior are vulnerable to local file inclusion. impact: | An attacker...

9.9CVSS7.6AI score0.73295EPSS

Exploits1References5

OSSF Malicious Packages•added yesterday•5 views

Malicious code in awaitly-visualizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a6c7977dbc054cdb7fe56da0d2fbd26e2a6fed695deb4263ccbf4adfedd86acb The Miasma malware is a self-propagating worm that spreads across the npm registry by abusing weaponized binding.gyp files to achieve...

5.7AI score

Exploits0References2

NVD•added 2026/05/28 9:16 a.m.•11 views

CVE-2026-8689

4.3CVSS0.00034EPSS

Cvelist•added 2026/05/28 7:43 a.m.•25 views

CVE-2026-8689 Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions

4.3CVSS0.00034EPSS

Vulnrichment•added 2026/05/28 7:43 a.m.•6 views

EUVD•added 2026/05/28 7:43 a.m.•10 views

EUVD-2026-32746

CVE•added 2026/05/28 7:43 a.m.•8 views

CVE-2026-8689

The CVE concerns the Visualizer: Tables and Charts Manager for WordPress plugin (WordPress) with versions up to 3.11.14. Root cause: missing capability checks on renderChartPages() and uploadData(), enabling certain AJAX actions (wp_ajax_visualizer-create-chart, wp_ajax_visualizer-edit-chart, and...

ATTACKERKB•added 2026/05/28 7:43 a.m.•8 views

CVE-2026-8689

CNNVD•added 2026/05/28 12:0 a.m.•6 views

Exploits0References9

WordPress plugin Visualizer: Tables and Charts Manager for WordPress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

Positive Technologies•added 2026/05/28 12:0 a.m.•7 views

PT-2026-44219

Patchstack•added 2026/05/27 7:31 p.m.•5 views

Exploits0References9

WordPress Visualizer: Tables and Charts Manager for WordPress plugin <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Chart Creation and Modification vulnerability discovered by davidfdzmorilla in WordPress Plugin Visualizer versions = 3.11.14...

4.3CVSS5.8AI score0.00034EPSS

Exploits0References1Affected Software1

NVD•added 2026/05/20 1:16 p.m.•7 views

CVE-2026-24573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...

6.5CVSS0.00034EPSS

EUVD•added 2026/05/20 12:54 p.m.•6 views

EUVD-2026-31099

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...

ATTACKERKB•added 2026/05/20 12:54 p.m.•3 views

CVE-2026-24573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...

Vulnrichment•added 2026/05/20 12:54 p.m.•5 views

Exploits0References2

CVE-2026-24573 WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Stored XSS. This issue affects Visualizer: from n/a before 4.0.0...

CVE•added 2026/05/20 12:54 p.m.•5 views

CVE-2026-24573

The CVE-2026-24573 entry affects the WordPress Visualizer plugin prior to version 4.0.0. The issue is a Stored XSS (Improper Neutralization of Input During Web Page Generation) in the Visualizer component, enabling an attacker-supplied payload to be stored and rendered in the affected pages. Affe...