CVE-2026-1992

The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2. This is due to the storesettings method in the ExactMetricsOnboarding class accepting a user-supplied triggeredby parameter that is used instead of...

CVE-2026-2114

A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/editadmin.php. The manipulation of the argument adminid results in sql injection. The attack may be performed from remote. The exploit is now public and may be us...

PT-2022-17986 · Zoho · Zoho Manageengine Remote Access Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Remote Access Plus versions prior to 10.1.2137.15 Description: The issue allows guest users to view domain details, including the username and GUID of an administrator. Recommendations: For versions prior to 10.1.2137.15,...