266235 matches found
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.9.7...
CVE-2026-112829 WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30...
EUVD-2026-105138
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30...
CVE-2026-112829
The Booktics WordPress plugin (versions n/a through 1.0.30 ) is susceptible to a Missing Authorization vulnerability (CWE-862 ). The issue stems from Incorrectly Configured Access Control Security Levels , which could allow an attacker to exploit improper authorization checks. No specific exploit...
WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Matthew Lapinski in WordPress Plugin Booktics versions = 1.0.30...
CVE-2026-109700 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...
CVE-2026-109700 WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...
CVE-2026-109700
The Meta Box – WordPress Custom Fields Framework plugin (versions up to and including 5.15.2 ) is vulnerable to a Broken Access Control issue. The root cause is Missing Authorization , which allows for the exploitation of incorrectly configured access control security levels. This vulnerability m...
EUVD-2026-105131
Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.15.2...
WordPress Meta Box – WordPress Custom Fields Framework plugin <= 5.15.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Deva Parekh in WordPress Plugin Meta Box – WordPress Custom Fields Framework versions = 5.15.2...
CVE-2026-112834 WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...
CVE-2026-112834
The Seriously Simple Podcasting WordPress plugin (versions up to and including 3.17.0 ) is vulnerable to a Broken Access Control issue. The root cause is a Missing Authorization vulnerability (CWE-862), specifically allowing for the exploitation of incorrectly configured access control security l...
EUVD-2026-105041
Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0...
WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Deva Parekh in WordPress Plugin Seriously Simple Podcasting versions = 3.17.0...
CVE-2026-91041
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...
Havoc
Havoc Havoc is a modern and malleable post-exploitation command and control framework, created by@C5pider. Quick Start Please see the Wiki for complete documentation. Havoc works well on Debian 10/11, Ubuntu 20.04/22.04 and Kali Linux. It's recommended to use the latest versions possible to avoid...
CVE-2026-113619
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies...
EUVD-2026-104999
Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, and on a common embedded memory layout it reaches the FXMEDIA driver callback, giving control of the instruction point...
EUVD-2026-104987
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies...
CVE-2026-113619
Eclipse ioFog Controller versions 3.8.0 through 3.9.1 is vulnerable to an uncontrolled resource consumption issue (CWE-400). The Liquid engine renders POST, PUT, and PATCH request bodies containing template substitutions before performing authentication or RBAC checks. Because the bearer check fa...