Lucene search
+L

12578 matches found

Vulnrichment
Vulnrichment
added 2026/06/02 5:28 p.m.9 views

CVE-2026-1829 Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Execution

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'etpbtext' shortcode 'cvdbcontentvisibilitycheck' parameter. This makes it possible for authenticated attackers, with Contributor-level access and...

8.8CVSS6.1AI score0.00708EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/02 5:28 p.m.12 views

CVE-2026-1829

CVE-2026-1829 affects the WordPress plugin Content Visibility for Divi Builder. The NVD/NVD-derived records indicate a Remote Code Execution vulnerability in all versions up to and including 4.02, exploitable via the et_pb_text shortcode parameter cvdb_content_visibility_check. The root cause is ...

8.8CVSS6.1AI score0.00708EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/02 5:28 p.m.13 views

EUVD-2026-33993

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'etpbtext' shortcode 'cvdbcontentvisibilitycheck' parameter. This makes it possible for authenticated attackers, with Contributor-level access and...

8.8CVSS6.1AI score0.00708EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/02 5:28 p.m.8 views

CVE-2026-1829

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'etpbtext' shortcode 'cvdbcontentvisibilitycheck' parameter. This makes it possible for authenticated attackers, with Contributor-level access and...

8.8CVSS6.1AI score0.00708EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/02 5:28 p.m.42 views

CVE-2026-1829 Content Visibility for Divi Builder <= 4.02 - Authenticated (Contributor+) Remote Code Execution

The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'etpbtext' shortcode 'cvdbcontentvisibilitycheck' parameter. This makes it possible for authenticated attackers, with Contributor-level access and...

8.8CVSS0.00708EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/02 3:37 p.m.13 views

Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Node.js

Summary There are multiple vulnerabilities in Node.js used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2026-44664 DESCRIPTION: fast-xml-builder builds XML from JSON. In 1.1.5, the fix for CVE-2026-41650 in fast-xml-parser sanitizes -- sequences in XML comment...

6.1CVSS5.9AI score0.00238EPSS
SaveExploits1Affected Software1
NVD
NVD
added 2026/06/02 2:16 p.m.13 views

CVE-2026-49782

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0...

5.4CVSS0.00198EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/02 2:3 p.m.62 views

CVE-2026-49782 WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0...

5.4CVSS0.00198EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 2:3 p.m.11 views

CVE-2026-49782 WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/02 2:3 p.m.13 views

EUVD-2026-33933

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 2:3 p.m.10 views

CVE-2026-49782

Missing Authorization vulnerability in Elementor Elementor Website Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elementor Website Builder: from n/a through 4.1.0...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/02 2:3 p.m.273 views

CVE-2026-49782

CVE-2026-49782 concerns the WordPress Elementor Website Builder plugin (

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/06/02 2:2 p.m.12 views

WordPress Elementor Website Builder plugin <= 4.1.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Elementor Website Builder versions = 4.1.0...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.23 views

PT-2026-45758

Name of the Vulnerable Software and Affected Versions Elementor Website Builder versions prior to 4.1.0 Description A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 4.1.0...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.11 views

WordPress plugin Content Visibility for Divi Builder 代码注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.8CVSS5.8AI score0.00708EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.8 views

WordPress plugin Elementor Website Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

5.4CVSS5.4AI score0.00198EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/01 10:4 p.m.16 views

CVE-2026-39292

Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pagebuilder module that allows remote attackers to upload arbitrary files and achieve remote code execution. The vulnerability exists due to insufficient validation of uploaded file types...

7.3CVSS6.3AI score0.00472EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/06/01 10:0 p.m.12 views

CVE-2026-24782

Kiteworks is a private data network PDN. Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global...

7.6CVSS5.9AI score0.00667EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.15 views

Next Level Builder GoClaw 权限许可和访问控制问题漏洞

Goclaw is an open-source multi-tenant AI agent platform developed by Next Level Builder. Goclaw versions 3.11.3 and earlier have a vulnerability related to authorization. This vulnerability stems from improper authorization in the auth function within the internal/http/evolutionhandlers.go file,...

5.5CVSS6.1AI score0.0023EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.33 views

PT-2026-45654

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.3.0 Description Kiteworks is a private data network PDN. Multiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms allow an authenticated attacker with the FormBuilder role to retrieve information on o...

8.8CVSS5.7AI score0.00667EPSS
SaveExploits0References5
Rows per page
Query Builder