CVE-2026-93507

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type or status, including other users' private or draft content, and gain read...

CVE-2026-86602

The WP Recipe Maker WordPress plugin before 10.8.2 does not perform any capability check in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the full content of unpublished recipes...

CVE-2023-27163-POC

CVE-2023-27163 PoC de SSRF para Request-Baskets CVE-2023-27163 basado en este código de entr0pie. El PoC se ha ampliado para hacer fuzzing del contenido de otro servicio web local o no y devolver el contenido de los archivos encontrados. Uso root@kitploit: python3 CVE-2023-27163.py http://: -t...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server 目录遍历漏洞 Spring Cloud Config 2.1.x 系列早于 2.1.2、2.0.x 系列早于 2.0.4、1.4.x 系列早于 1.4.6 的版本，以及更早的不受支持版本，允许应用程序通过 spring-cloud-config-server 模块提供任意配置文件。恶意用户或攻击者可以利用特制的 URL 发起目录遍历攻击。 发现者：Vern [email protected] 安全公告 https://pivotal.io/security/cve-2019-3799...

CVE-2019-5418

CVE-2019-5418 - Divulgación de contenido de archivos en Rails EDIT : esta CVE puede provocar una ejecución remota de código, más información: https://github.com/mpgn/Rails-doubletap-RCE Existe una posible vulnerabilidad de divulgación de contenido de archivos en Action View. Las cabeceras accept...

nextjs-CVE-2024-34351-_exploit

CVE-2024-34351 Exploit PoC de CVE-2024-34351 Falsificación de Solicitud del Lado del Servidor en Server Actions de Next.js · CVE-2024-34351 · Base de Datos de Avisos de GitHub Excavando en busca de SSRF en aplicaciones NextJS Resumen PoC para una explotación completa de SSRF en NextJS. Un atacant...

CVE-2026-92422

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered...

CVE-2026-92422

The Meow Gallery WordPress plugin before 5.5.5 contains an improper sanitization flaw in its load_gallery_collection REST route . A user-supplied value is concatenated into a shortcode string without adequate sanitization before being passed to the WordPress shortcode parser on this publicly reac...

CVE-2026-92422 Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route

The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly reachable endpoint, allowing unauthenticated users to execute arbitrary registered...

CVE-2026-16557 Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing any authenticated user Subscriber+ to disclose the page-builder content of arbitrary non-public draft, pending, private...

CVE-2026-16557

The Nimble Page Builder WordPress plugin through version 3.3.8 is missing an authorization check in the authenticated AJAX action sek_get_nimble_content_for_seo_plugins . This allows any authenticated user with Subscriber role or higher to retrieve the page-builder content of arbitrary non-public...

WordPress King Addons for Elementor plugin < 51.1.81 - Contributor+ Private Post Content Disclosure vulnerability

Contributor+ Private Post Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin King Addons for Elementor versions 51.1.81...

CVE-2026-84903 King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode

The King Addons for Elementor WordPress plugin before 51.1.81 does not perform any capability, post-status, or password check before rendering the content of a user-supplied post, allowing users with Contributor-level access and above to read the content of private, draft, pending, and...

CVE-2026-93455 django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account

django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff credentials can enumerate content identifiers and access unpublished drafts, page...

gortex-PoC

Seguimiento de enlaces simbólicos en el recorrido de archivos del indexador → Divulgación de contenido fuera del repositorio mediante searchtext Estado del CVE: solicitado, asignación pendiente. Este hallazgo se publica como GHSA-6vhf-4wcm-2r83. Tras la asignación del CVE, este repositorio se...

WordPress Schema & Structured Data for WP & AMP plugin 1.46-1.65 - Unauthenticated Non-Public Comment Content Disclosure vulnerability

Unauthenticated Non-Public Comment Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.46-1.65...

WordPress Schema & Structured Data for WP & AMP plugin 1.63-1.65 - Contributor+ Non-Public Post Content Disclosure vulnerability

Contributor+ Non-Public Post Content Disclosure vulnerability discovered by Shirshak in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.63-1.65...

CVE-2026-82126

The Schema & Structured Data for WP & AMP WordPress plugin (versions 1.63–1.65 ) contains an improper access control flaw in its AI schema generation feature. The plugin fails to verify that a requesting user is permitted to edit the specific post they target for schema generation, allowing any u...

WordPress Schema & Structured Data for WP & AMP plugin < 1.66 - Unauthenticated Password-Protected Post Content Disclosure vulnerability

Unauthenticated Password-Protected Post Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Schema & Structured Data for WP & AMP versions 1.66...

CVE-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...