Lucene search
+L

75237 matches found

EUVD
EUVD
added 5 hours ago6 views

EUVD-2026-52595

The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to...

5.5AI score
SaveExploits0References1
CVE
CVE
added 5 hours ago8 views

CVE-2026-16546

The affected software is the Wired Impact Volunteer Management WordPress plugin (versions before 2.8.2). The vulnerability stems from missing authorization checks in an AJAX action (likely related to wivm_remove_rsvp) and failure to verify that the RSVP being removed belongs to the requesting use...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 5 hours ago9 views

EUVD-2026-52599

The Wired Impact Volunteer Management WordPress plugin before 2.8.2 does not have authorisation checks in one of its AJAX actions, and does not verify that the RSVP being removed belongs to the requesting user, allowing users with a role as low as Subscriber to remove arbitrary users' RSVPs from...

5.7AI score
SaveExploits0References1
EUVD
EUVD
added 5 hours ago10 views

EUVD-2026-52590

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

5.6AI score
SaveExploits0References1
CVE
CVE
added 5 hours ago7 views

CVE-2026-15958

The CVE-2026-15958 entry affects the WordPress plugin Easy Integration for Dropbox (before 2.2.0). The vulnerability arises from missing authorization checks on several file-management AJAX actions that are exposed to unauthenticated users, enabling an attacker to perform unauthenticated actions ...

5.6AI score
SaveExploits0References1
EUVD
EUVD
added 8 hours ago8 views

EUVD-2026-52572

A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the component Survey Status Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The...

6.5CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
added 8 hours ago9 views

EUVD-2026-52571

A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched...

6.5CVSS6.1AI score
SaveExploits0References5
CVE
CVE
added 8 hours ago14 views

CVE-2026-18722

Technical details (affected product, vulnerable component, root cause, impact, fixes) are not publicly available in the provided documents; monitor for updates.

6.5CVSS6.1AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 9 hours ago4 views

CVE-2026-18720

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

6.9CVSS5.6AI score
SaveExploits0References5
CVE
CVE
added 9 hours ago6 views

CVE-2026-18720

The CVE concerns kalcaddle kodbox 1.67 Build 02, specifically the /index.php?plugin/msgWarning/action area of the msgWarning Plugin. The vulnerability allows remote, unauthenticated manipulation leading to improper authorization. Exploitation is reported as possible, with PoC exploit activity obs...

6.9CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
added 9 hours ago8 views

EUVD-2026-52565

A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The explo...

6.9CVSS5.6AI score
SaveExploits0References5
EUVD
EUVD
added 10 hours ago6 views

EUVD-2026-52535

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

6.5CVSS5.7AI score
SaveExploits0References2
EUVD
EUVD
added 10 hours ago5 views

EUVD-2026-52518

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction...

9.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 10 hours ago5 views

EUVD-2026-52531

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

6.2CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 10 hours ago7 views

EUVD-2026-52486

Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing authorization vulnerability on the drafts endpoint that allows any authenticated low-privileged user to create draft posts by bypassing role and permission checks. Attackers can send requests to the drafts endpoint using only...

5.3CVSS5.5AI score
SaveExploits0References4
NVD
NVD
added yesterday10 views

CVE-2026-48333

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated privileges. Exploitation of this issue does not require user interaction...

9.8CVSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-66326

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

6.5CVSS5.7AI score
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-66311

Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

6.2CVSS5.4AI score
SaveExploits0References2Affected Software1
CVE
CVE
added yesterday12 views

CVE-2026-48333

CVE-2026-48333 affects Adobe Campaign Classic (ACC). The vulnerability is an Incorrect Authorization issue that could enable an attacker to attain elevated privileges. Exploitation does not require user interaction and is described with a high impact: confidentiality, integrity, and availability ...

9.8CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added yesterday9 views

CVE-2026-67616

CVE-2026-67616 affects Camaleon CMS up to version 2.9.2. The flaw is a missing authorization on the drafts endpoint (admin/post_type drafts) that lets any authenticated low-privileged user bypass role/permission checks to create draft posts. These unauthorized drafts appear in the administrative ...

5.3CVSS5.5AI score
SaveExploits0References3
Rows per page
Query Builder