2937 matches found
WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by dodoh4t in WordPress Plugin Youzify versions = 1.3.7...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
PT-2026-82305
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
CVE-2026-75413
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...
CVE-2026-28167 WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
EUVD-2026-64796
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
CVE-2026-28167
CVE-2026-28167 is an unauthenticated arbitrary file download vulnerability in the WordPress Super Forms plugin affecting versions 6.3.315 and below . The flaw allows a remote attacker to download arbitrary files from the server without authentication, leading to a high confidentiality impact (CVS...
CVE-2026-28167 WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
WordPress Super Forms plugin <= 6.3.315 - Arbitrary File Download vulnerability
Arbitrary File Download vulnerability discovered by VanTastic in WordPress Plugin Super Forms versions = 6.3.315...
PT-2026-80829
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
CVE-2026-73383
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
CVE-2026-73181
Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce 7.6 versions...
EUVD-2026-60798
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
CVE-2026-73383 WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
CVE-2026-73383 WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
CVE-2026-73383
The WordPress CTX Feed plugin (versions ≤ 6.6.47) allows a Shop Manager to download arbitrary files from the server. CVSS 3.1 scores it MEDIUM (4.9), requiring network access and HIGH privileges. Patchstack discovered the flaw; update to a patched version beyond 6.6.47 to remediate. No exploitati...
CVE-2026-73383
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
CVE-2026-73181
Extra Product Options & Add-Ons for WooCommerce plugin versions below 7.6 allow unauthenticated attackers to download arbitrary files, exposing sensitive data with CVSS 7.5 (HIGH). PatchStack reports the flaw; no exploit code is provided. Upgrade to version 7.6 or later to remediate. Exploitation...