384346 matches found
CVE-2026-41561 WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Museder RestoreOne = 2.7.276 versions...
CVE-2026-41559
The SafeSnap – Verified WordPress Backup & Restore plugin (versions
CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
EUVD-2026-93046
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
EUVD-2026-93045
Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email = 1.5.9 versions...
CVE-2026-39791 WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...
CVE-2026-39791
The Mailjet Email Marketing plugin for WordPress (versions
EUVD-2026-93035
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...
CVE-2026-39791 WordPress Mailjet Email Marketing plugin <= 6.2.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing = 6.2.3 versions...
CVE-2026-39729 WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...
CVE-2026-39729
The Edwiser Bridge WordPress plugin versions
CVE-2026-39729 WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...
EUVD-2026-93251
Unauthenticated Sensitive Data Exposure in Edwiser Bridge = 4.3.4 versions...
axios: Axios: Information disclosure via improper CIDR proxy bypass handling
A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...
io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak
A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...
CVE-2026-94278
The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...
CVE-2026-94293
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
CVE-2026-89289
The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite the courier status and customer-facing tracking details of any WooCommerce order by supplying its id...