389877 matches found
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin (before 2.0.7 ) has a missing authorization flaw on certain REST API routes, specifically the download-all endpoint. Because the token identifying requested content is forgeable client-side , unauthenticated users can list and download the cont...
CVE-2026-18234
The MStore API WordPress plugin (versions before 4.21.1 ) has a wallet payment handling flaw: it does not verify that the targeted order belongs to the requester and fails to deduct the wallet balance for most payment methods. As a result, any authenticated user—including those with the Subscribe...
CVE-2026-76548
The User Profile Builder WordPress plugin (versions before 4.0.1 ) contains an authorization flaw in its front-end file upload feature. Due to improper access restrictions, unauthenticated visitors are granted capabilities normally reserved for privileged roles, allowing them to list the site's m...
CVE-2026-76546
The User Profile Builder WordPress plugin prior to version 4.0.1 is vulnerable to a Stored Cross-Site Scripting (XSS) attack caused by unescaped output in the Format Date shortcode . Any user with a role as low as contributor can inject malicious script that executes when any user—including admin...
CVE-2026-18233
The MStore API WordPress plugin prior to 4.21.1 suffers from a missing authorization check in one of its delivery endpoints. The endpoint does not verify that the targeted order belongs to the requesting user, so any authenticated user—including low-privilege Subscribers —can mark arbitrary order...
CVE-2026-16600
CVE-2026-16600 affects the SmartAIPress WordPress plugin through version 1.2.0 . The vulnerability is a full-read Server-Side Request Forgery (SSRF) caused by a missing capability check on the AJAX action smartaipress_openai_upload_and_set_featured_image combined with the absence of validation on...
CVE-2026-16947
The Total Processing Card Payments for WooCommerce WordPress plugin through version 7.3 contains an unauthenticated SSRF vulnerability. The plugin does not validate a user-supplied path before using it to build a server-side verification request, nor does it verify the authenticity of the respons...
CVE-2026-17520
CVE-2026-17520 affects the Newsletters WordPress plugin prior to 4.17 . The root cause is that the plugin generates its API key from a publicly known value rather than a sufficiently random source, making it predictable. When the optional API feature is enabled, an unauthenticated attacker can co...
CVE-2026-17522
Newsletters is a WordPress plugin that, in versions before 4.17 , fails to perform any nonce or capability check when saving one of its settings screens. Because it writes every submitted parameter into its own options, an attacker can use a Cross-Site Request Forgery (CSRF) attack to trick a log...
CVE-2026-16259
CVE-2026-16259 affects the Uix UserCenter WordPress plugin through version 1.0.3 . The vulnerability stems from two combined weaknesses: the plugin does not verify that the account being modified through an unauthenticated profile-update action actually belongs to the requester, and it authentica...
CVE-2026-16061
The Rest Routes WordPress plugin (through version 5.5.5 ) contains an unauthenticated SQL injection vulnerability. A value taken from the URL of a public REST route—specifically the custom-tables/tables/{table_name} endpoint—is not sanitized or validated before being used in a SQL query. This all...
CVE-2026-10522
CVE-2026-10522 affects the MemberHero WordPress plugin through version 6.9. The vulnerability exists in the plugin's frontend registration process , which does not restrict which account fields can be supplied. This allows unauthenticated attackers to register a new user with an arbitrary role—in...
CVE-2026-41012
CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...
CVE-2026-19296
Technical details for CVE-2026-19296 are not yet publicly available; the entry remains reserved. A published proof-of-concept was sighted on 2026-08-28 via a Telegram channel. Action: monitor for updates.
CVE-2026-55860
MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb), a non-blocking Java R2DBC client for MariaDB/MySQL, is affected by a cleartext password disclosure vulnerability prior to version 1.4.1. The AuthenticationPlugin interface lacks the ability to require a secure connection, so clear-text password...
CVE-2026-55859
MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb) is a non-blocking Java client for MariaDB and MySQL. Prior to 1.4.1 , the driver encodes and decodes all character data assuming the connection character set is UTF-8 . A server can announce a mid-session change to character_set_client through t...
CVE-2026-55858
MariaDB Connector/J (org.mariadb.jdbc:mariadb-java-client) is vulnerable to a charset-confusion mismatch in versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9. The connector assumes a UTF-8 connection character set for protocol encoding/decoding and client-side escaping. If the server reports a mi...
CVE-2026-55857
MariaDB Connector/J (versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9) is vulnerable to cleartext password transmission during PAM dialog authentication . The PAM handler SendPamAuthPacketFactory (referred to as dialog by the server) does not declare a secure-transport requirement and inherits t...
CVE-2026-55856
MariaDB Connector/J (Java connector for MariaDB/MySQL databases) has a cleartext password disclosure vulnerability on the initial-handshake path. When an application connects with sslMode=verify-full or verify-ca, supplies a password, and does not configure serverSslCert or trustStore, the connec...