9057 matches found
WordPress plugin Real Homes CRM code issue vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-4190
Unrestricted Upload of File with Dangerous Type vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Upload a Web Shell to a Web Server.This issue affects Xpro Elementor Addons: from n/a through = 1.4.19.1...
WordPress plugin Energia has a code vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Blogmatic: code-related vulnerabilities
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There we...
PT-2026-3992
Name of the Vulnerable Software and Affected Versions blazethemes Blogmatic versions through 1.0.3 Description The software contains a flaw related to unrestricted file uploads, allowing potentially dangerous file types to be uploaded. There is no information about the number of potentially...
PT-2026-3930
Name of the Vulnerable Software and Affected Versions Teknoera versions through 01102025 Description An unrestricted file upload issue exists in Teknoera, potentially allowing file content injection. The issue allows for the upload of files with dangerous types. Recommendations Versions through...
PT-2026-4047
Name of the Vulnerable Software and Affected Versions garidium g-FFL Checkout versions n/a through 2.1.0 Description The software contains a flaw related to unrestricted file uploads with dangerous file types. This allows for the upload of a web shell to a web server. Recommendations Update...
PT-2026-4111
Name of the Vulnerable Software and Affected Versions blazethemes Blogistic versions through 1.0.5 Description The software contains a flaw related to unrestricted file uploads, allowing the use of malicious files. This could potentially allow an attacker to compromise the system. Recommendations...
Solvera Teknoera code-related vulnerabilities
Solvera Teknoera is a technology development management software developed by the Turkish company Solvera. Versions of Solvera Teknoera prior to 01102025 contained code vulnerabilities. These vulnerabilities stemmed from unlimited uploading of dangerous types of files, which could lead to file...
PT-2026-4112
Name of the Vulnerable Software and Affected Versions Blogzee versions through 1.0.5 Description The software contains a flaw that permits the upload of files with dangerous types. This allows for the use of malicious files. Recommendations Update Blogzee to a version later than 1.0.5...
PT-2026-4046
Name of the Vulnerable Software and Affected Versions Real Homes CRM versions prior to 1.0.1 Description The Real Homes CRM plugin bundled with the RealHomes WordPress theme contains a flaw that allows attackers to exploit weak authorization logic. This could lead to manipulation of user accounts...
PT-2026-3978
Name of the Vulnerable Software and Affected Versions Farost Energia energia versions n/a through 1.1.2 Description The software contains a flaw related to unrestricted file uploads with dangerous file types. This allows for the upload of a web shell to a web server. Recommendations Versions prio...
PT-2026-3993
Name of the Vulnerable Software and Affected Versions blazethemes News Event versions through 1.0.1 Description An issue exists in blazethemes News Event news-event that allows for unrestricted file uploads with dangerous file types. The vulnerability allows attackers to upload malicious files,...
CVE-2026-23630
Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cross-Site Scripting XSS. The frontend can render attacker-controlled Mermaid diagrams using mermaid.render, then inject the returned SVG/HT...
Symlink Poisoning
node-tar is vulnerable to Symlink Poisoning. The vulnerability is due to insufficient sanitization of hardlink and symlink linkpath values during archive extraction, where malicious tar entries can bypass the extraction root restriction and overwrite arbitrary files or create dangerous symlinks...
CVE-2026-0903
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. Chromium security severity: Medium...
CVE-2026-0903
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. Chromium security severity: Medium...
CVE-2026-0903
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file. Chromium security severity: Medium...
