16265 matches found
CVE-2026-57321
Contributor Arbitrary File Deletion in H5P = 1.17.7 versions...
CVE-2026-56038
Contributor Privilege Escalation in Frisbii Pay = 1.8.2 versions...
CVE-2026-56008
Contributor Privilege Escalation in Fusion Builder = 3.15.4 versions...
EUVD-2026-39667
Contributor SQL Injection in Contest Gallery = 30.0.0 versions...
EUVD-2026-39765
Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.3 versions...
EUVD-2026-39762
Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer = 1.6.1 versions...
EUVD-2026-39757
Contributor SQL Injection in Gallery = 4.7.8 versions...
CVE-2026-57642
Contributor SQL Injection in Gallery = 4.7.8 versions...
EUVD-2026-39752
Contributor SQL Injection in wpForo Forum = 3.0.9 versions...
EUVD-2026-39750
Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...
CVE-2026-57618
Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...
EUVD-2026-39733
Contributor Arbitrary File Deletion in H5P = 1.17.7 versions...
EUVD-2026-39728
Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.45 versions...
EUVD-2026-39700
Contributor Privilege Escalation in Frisbii Pay = 1.8.2 versions...
EUVD-2026-39685
Contributor Privilege Escalation in Fusion Builder = 3.15.4 versions...
PT-2026-52812
Name of the Vulnerable Software and Affected Versions Gallery versions prior to 4.7.9 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, specifically affecting contributors. Recommendations Update to ...
PT-2026-52718
Name of the Vulnerable Software and Affected Versions Image Carousel versions prior to 1.0.0.42 Description Cross Site Scripting XSS exists in the Contributor role, allowing an attacker to execute malicious scripts in the browser of other users. Recommendations Update Image Carousel to a version...
PT-2026-52739
Name of the Vulnerable Software and Affected Versions Fusion Builder versions prior to 3.15.5 Description A privilege escalation issue exists that allows a user with Contributor permissions to elevate their privileges. Recommendations Update to a version newer than 3.15.4...
CVE-2021-47987 Parse Server - Arbitrary Code Execution via Malicious Version Tags
Parse Server before 4.10.0 was affected by a supply chain incident in which incorrect version tags were pushed to the official repository pointing to an unreviewed personal fork of a contributor with write access. No releases were published with these tags; a project was exposed only if it define...