CVE-2026-2002-poc

ملخص إضافة Forminator Forms – Contact Form, Payment Form & Custom Form Builder لـ WordPress عرضة لـ Stored Cross-Site Scripting عبر معامل formname في جميع الإصدارات حتى 1.50.2، وذلك بسبب عدم كفاية تنظيف المدخلات وهروب المخرجات. هذا يتيح للمهاجمين الموثقين، بصلاحيات مستوى المشرف، حقن نصوص برمجية...

CVE-2026-86090

ntopng before 6.7.260717 fails to perform authorization checks in the REST v2 delete handlers for notification endpoints and recipients (in endpoints.lua and recipients.lua). An authenticated non-administrator user can issue POST requests to irreversibly delete all configured notification endpoin...

CVE-2025-6934

CVE-2025-6934 🛡️ CVE-2025-6934 - تصعيد الامتيازات غير المصادق عليه في Opal Estate Pro 📝 الوصف إضافة Opal Estate Pro – إدارة الممتلكات والتقديم لـ WordPress، المستخدمة في قالب FullHouse - العقارات المستجيب لـ WordPress، معرضة لتصعيد الامتيازات في جميع الإصدارات حتى 1.7.5 وما بعده. معرف CVE:...

CVE-2025-6220

Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...

CVE-2025-7431

Preuve de concept – CVE-2025-7431 Knowledge Base = 2.3.1 – Cross-Site Scripting stocké authentifié Administrateur+ via le slug du plugin CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N ------- 4.4 Présentation de la vulnérabilité Un attaquant authentifié disposant du rôle Administrateur peut exploit...

CVE-2017-0213-

CVE-2017-0213 чтобы получить привилегии администратора из CMD Уязвимые системы Продукт| Версия| Обновление| Протестировано ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| ...

Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation

The Masteriyo LMS – eLearning and Online Course Builder for WordPress plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the updateloggedinuser function in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers t...

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

HyperComments <= 1.2.2 - Arbitrary Options Update

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hcrequesthandler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping المؤلف: Byte Reaper الوصف CVE-2025-10046 هي ثغرة حقن SQL في إضافة ELEX WooCommerce Google Shopping Product Feed لووردبريس، الإصدارات 1.4.3 والأقدم. توجد المشكلة في ملف includes/elex-manage-feed-ajax.php، حيث لا يتم تنقية المعامل filetodelete بشكل...

vcenter_saml_login

vCenter SAML Login Tool Un outil pour extraire le certificat du fournisseur d'identité IdP des sauvegardes vCenter et se connecter en tant qu'Administrateur Contexte Généralement, lors de missions, nous accédons aux sauvegardes vCenter sur un serveur de fichiers ou obtenons un accès root à l'hôte...

EUVD-2026-70379

A stored Cross-Site Scripting XSS vulnerability in the notification template functionality of the endpoint /ocsreports/?function=notification. A user with administrator privileges can input malicious HTML content which is subsequently stored and displayed without proper sanitisation when other...

EUVD-2026-70378

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

CVE-2026-22241

🚨 CVE-2026-22241 - Exécution de code à distance via l'importation de thèmes dans Open eClass 📌 Résumé de la vulnérabilité Open eClass également connu sous le nom de GUnet eClass, un système de gestion de l'apprentissage LMS open source largement utilisé, contient une vulnérabilité critique de...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-17589

The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to generic SQL Injection via the 'productorder' parameter in all versions up to, and including, 5.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2026-77823 LearnPress <= 4.4.4 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

The LearnPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter of the exportordercsv AJAX action in versions up to, and including, 4.4.4. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...

CVE-2026-76006 Photo Gallery by Ays <= 6.8.2 - Authenticated (Administrator+) SQL Injection via 's' Parameter

The Photo Gallery by Ays – Responsive Image Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 6.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer...