Lucene search
+L

901 matches found

EUVD
EUVD
added 2026/03/25 6:31 p.m.10 views

EUVD-2026-15629

Deserialization of Untrusted Data vulnerability in parkofideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through 1.27...

5.8AI score0.00375EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/25 4:14 p.m.20 views

CVE-2026-25031

The CVE-2026-25031 advisory describes a Deserialization of Untrusted Data vulnerability in the WordPress theme Tasty Daily by park_of_ideas. Concrete details across connected sources show that the issue is an Object Injection vulnerability in Tasty Daily tastydaily prior to version 1.27, caused b...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.35 views

CVE-2026-25031 WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in parkofideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through 1.27...

9.8CVSS0.00375EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.6 views

CVE-2026-25031 WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in parkofideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through 1.27...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.14 views

WordPress plugin Tasty Daily 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.9 views

PT-2026-27890

Name of the Vulnerable Software and Affected Versions Tasty Daily versions prior to 1.27 Description An issue exists in Tasty Daily that allows for object injection due to deserialization of untrusted data. This could potentially allow an attacker to inject malicious objects. Recommendations Upda...

9.8CVSS5.9AI score0.00375EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/03/23 12:30 p.m.15 views

WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Tasty Daily versions 1.27...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/03/21 12:16 a.m.12 views

CVE-2026-3339

The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the kbdopenuploaddir AJAX action. This is due to insufficient validation of the kbdpath parameter, which is only sanitized with sanitizetextfield - a function that do...

2.7CVSS0.00375EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.18 views

WordPress plugin Keep Backup Daily 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.4CVSS5.7AI score0.00203EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/03/21 12:00 a.m.18 views

WordPress plugin Keep Backup Daily 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

2.7CVSS5.8AI score0.00375EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/20 11:25 p.m.36 views

CVE-2026-3577 Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title

The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias val parameter in the updatekbdbkupalias AJAX action in all versions up to, and including, 2.1.2. This is due to insufficient input sanitization and output escaping. While...

4.4CVSS0.00203EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/20 11:25 p.m.24 views

CVE-2026-3577

CVE-2026-3577 affects the Keep Backup Daily plugin for WordPress. It is a Stored XSS via the backup title alias (val parameter) in the update_kbd_bkup_alias AJAX action, affecting all versions up to and including 2.1.2. The issue stems from insufficient input sanitization and output escaping: san...

4.4CVSS6AI score0.00203EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/03/20 11:25 p.m.7 views

CVE-2026-3577 Keep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title

The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias val parameter in the updatekbdbkupalias AJAX action in all versions up to, and including, 2.1.2. This is due to insufficient input sanitization and output escaping. While...

4.4CVSS6AI score0.00203EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/20 11:25 p.m.4 views

CVE-2026-3577

The Keep Backup Daily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the backup title alias val parameter in the updatekbdbkupalias AJAX action in all versions up to, and including, 2.1.2. This is due to insufficient input sanitization and output escaping. While...

4.4CVSS6AI score0.00203EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/03/20 11:25 p.m.3 views

CVE-2026-3339 Keep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter

The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the kbdopenuploaddir AJAX action. This is due to insufficient validation of the kbdpath parameter, which is only sanitized with sanitizetextfield - a function that do...

2.7CVSS5.9AI score0.00375EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/20 11:25 p.m.11 views

CVE-2026-3339

The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the kbdopenuploaddir AJAX action. This is due to insufficient validation of the kbdpath parameter, which is only sanitized with sanitizetextfield - a function that do...

2.7CVSS5.9AI score0.00375EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/20 11:25 p.m.32 views

CVE-2026-3339

The CVE-2026-3339 entry affects the Keep Backup Daily plugin for WordPress (versions ≤ 2.1.1). It enables a Limited Path Traversal via the kbd_open_upload_dir AJAX action because kbd_path is only sanitized with sanitize_text_field(), which does not remove traversal sequences. An authenticated att...

2.7CVSS5.9AI score0.00375EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2026/03/20 9:11 p.m.15 views

WordPress Keep Backup Daily plugin <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup Title vulnerability

Authenticated Admin+ Stored Cross-Site Scripting via Backup Title vulnerability discovered by san6051 - PWC in WordPress Plugin Keep Backup Daily versions = 2.1.2...

4.4CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/03/20 9:06 p.m.15 views

WordPress Keep Backup Daily plugin <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' Parameter vulnerability

Authenticated Admin+ Limited Path Traversal via 'kbdpath' Parameter vulnerability discovered by san6051 - PWC in WordPress Plugin Keep Backup Daily versions = 2.1.1...

2.7CVSS5.8AI score0.00375EPSS
SaveExploits0References1Affected Software1
Microsoft Secure
Microsoft Secure
added 2026/03/20 4:00 p.m.35 views

Secure agentic AI end-to-end

Next week, RSAC™ Conference celebrates its 35-year anniversary as a forum that brings the security community together to address new challenges and embrace opportunities in our quest to make the world a safer place for all. As we look towards that milestone, agentic AI is reshaping industries...

5.8AI score
SaveExploits0
Rows per page
Query Builder