184089 matches found
EUVD-2026-58636
The getgrav/grav-plugin-api Composer package before 1.0.13 affected = 1.0.12 fails to enforce API key scope caps on the disable2fa endpoint. Unlike the sibling generate2fa endpoint, disable2fa authorizes the admin non-self path solely via ACL reads isSuperAdmin/hasPermission and never invokes...
cve-analysis-lab
Vulnerability Research & CVE Analysis Lab Analyst: Harsha...
WordPress User Registration plugin <= 5.2.6 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by DmTomHe in WordPress Plugin User Registration versions = 5.2.6...
WordPress Customer Email Verification for WooCommerce plugin < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability
Unauthenticated Account Takeover via Type-Juggling Authentication Bypass vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Email Verification for WooCommerce versions 3.2.6...
WordPress ShopEngine plugin < 4.9.3 - Customer PII Disclosure via Forced Authentication vulnerability
Customer PII Disclosure via Forced Authentication vulnerability discovered by Farid Narimanov in WordPress Plugin ShopEngine versions 4.9.3...
GO-2024-3246 vulnerabilities
Vulnerabilities for packages: vault...
GO-2026-4751 vulnerabilities
Vulnerabilities for packages: zitadel...
GO-2023-1723 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2024-2939 vulnerabilities
Vulnerabilities for packages: spicedb...
GO-2023-2020 vulnerabilities
Vulnerabilities for packages: promxy, prometheus-alertmanager...
GO-2024-2536 vulnerabilities
Vulnerabilities for packages: rancher-webhook...
GO-2026-5526 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5213 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5192 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2026-5609 vulnerabilities
Vulnerabilities for packages: openbao...
GO-2023-2133 vulnerabilities
Vulnerabilities for packages: nats...
GO-2025-3559 vulnerabilities
Vulnerabilities for packages: mods...
GO-2026-4803 vulnerabilities
Vulnerabilities for packages: minio...