115804 matches found
CVE-2025-15700 AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import
The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...
WordPress AWP Classifieds plugin < 4.4.9 - Admin+ Arbitrary File Upload vulnerability
Admin+ Arbitrary File Upload vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin AWP Classifieds versions 4.4.9...
PT-2026-109158
Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff users' password hashes. Authenticated staff users can query the Admin API to infer hash ordering, though this does not...
PT-2026-109159
Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff users with invite viewing permission can accept pending invites for higher-privileged roles to escalate their privileges...
CVE-2026-94158: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3...
WordPress WP Post Author ā Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin < 4.1.0 - Authenticated (Admin+) SQL Injection vulnerability
Authenticated Admin+ SQL Injection vulnerability discovered by Joshua Martinelle in WordPress Plugin WP Post Author versions 4.1.0...
PT-2026-109145
Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. Attackers with staff privileges can query the feedback endpoint to retrieve sensitive member information without...
CVE-2026-108261: Origin Validation Error
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the // admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/preview.tsx, while...
Apache APISIX 2.11.0 Default Admin Token Remote Command Execution
Apache APISIX version 2.11.0 uses a default administrative API token that permits route creation. A route script can execute commands, resulting in remote command execution. https://packetstorm.news/download/235028...
GlassFish 4.1 Admin Console Arbitrary File Read
GlassFish version 4.1 contains an arbitrary file read vulnerability in its admin console due to overlong UTF-8 decoding. The supplied proof of concept uses crafted traversal sequences to read files without authentication. https://packetstorm.news/download/235013...
Openfire 4.7.4 Admin Console Authentication Bypass
Openfire version 4.7.4 contains an administrative console authentication bypass via path traversal in setup pages. The supplied proof of concept details creating an administrator without authentication. https://packetstorm.news/download/234992...
CVE-2026-107856: Authorization Bypass Through User-Controlled Key
CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3.33.0, GET /admin/tiDash/editClientForm/:accountId verifies that the requester is a Trusted Intermediary but showEditClientForm performs a raw...
PT-2026-109142
Ghost npm package 'ghost' versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff user can read API keys returned by the Admin API, which are intended to be available only to higher-privileged users...
PT-2026-109153
Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the ghost head helper. An authenticated user with limited privileges can inject unescaped content that is rendered as script in the published page, potentially leading to...
PT-2026-109316
Name of the Vulnerable Software and Affected Versions tinacms versions prior to 3.14.0 @tinacms/app versions prior to 2.5.14 Description An origin validation error in the admin preview route allows an unauthenticated attacker to perform a confused-deputy attack against the content API. By sending...
PT-2026-109139
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through...
PT-2026-116490
Name of the Vulnerable Software and Affected Versions Vikunja versions 0.13.0 through 2.6.x Description An incorrect authorization issue allows project members with Write permission to delete admin-tier link shares. This occurs because the delete permission check reads an unloaded share object. A...
PT-2026-108820
šØ CVE-2026-94158 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel: from n/a through 1.3. š@cveNotify...
com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (>=1.0.3, <=1.0.4), com.hazelcast:hazelcast-build-utils (3.6.7) +11 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.6.7)
com.hazelcast:hazelcast MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter =1.0.3, =1.4.5, =1.4.6 Source cves:...
