19752 matches found
CVE-2026-94120
The GravityExport Lite for Gravity Forms plugin for WordPress (versions
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
EUVD-2026-89837
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94074 WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
CVE-2026-94074 WordPress Simply Schedule Appointments plugin <= 1.6.12.29 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
CVE-2026-94074
The Simply Schedule Appointments WordPress plugin, in versions
EUVD-2026-89830
Unauthenticated Broken Access Control in Simply Schedule Appointments = 1.6.12.29 versions...
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Erik Debye in WordPress Plugin The Events Calendar versions = 6.17.5...
Security Bulletin: Vulnerabilities exists in IBM Netezza Software
Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 11.3.1.3. Vulnerability Details CVEID:CVE-2026-39836 DESCRIPTION: The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0. CWE:CWE-476: NULL Pointer Dereference CVSS...
WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by gueco in WordPress Plugin Prevent files / folders access versions = 2.6.7...
CVE-2026-97196 WordPress GiveWP plugin <= 4.16.9 - Broken Authentication vulnerability
Improper Validation of Unsafe Equivalence in Input vulnerability in Liquid Web / StellarWP GiveWP allows Authentication Bypass. This issue affects GiveWP: from n/a through 4.16.9...
CVE-2026-97196
The Liquid Web / StellarWP GiveWP WordPress plugin, versions up to and including 4.16.9 , is vulnerable to an Authentication Bypass due to an Improper Validation of Unsafe Equivalence in Input vulnerability. This flaw allows an attacker to bypass authentication mechanisms, potentially granting un...
CVE-2026-97316
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...
CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...
CVE-2026-97316
The Broken Link Notifier WordPress plugin, specifically versions prior to 2.0.0.1 , is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The root cause is a failure to re-validate the destination of redirects when the plugin checks links. This allows an attacker to bypass the ...
EUVD-2026-89627
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...
CVE-2026-97316 Broken Link Notifier 1.3.1 - 2.0.0 - Unauthenticated SSRF via Redirect Bypass
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...
CVE-2026-97316: Server-Side Request Forgery (SSRF)
The Broken Link Notifier WordPress plugin before 2.0.0.1 does not re-validate the destination of redirects when checking links, allowing unauthenticated attackers to bypass its internal-address filter and make the server send requests to internal services...