CVE-2026-116896

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rexuser, rexusersession, and other applications' tables. Attackers can obtain plaintext session ids a...

PT-2026-126361

REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backupexport permission to export rex user, rex user session, and other applications' tables. Attackers can obtain plaintext session id...

CVE-2025-42891

CVE-2025-42891 involves a missing authorization check in SAP Enterprise Search for ABAP, enabling a high-privilege attacker to read/export database tables into an ABAP report. Affected component: SAP Enterprise Search for ABAP. Root cause: insufficient authorization checks. Impact (per sources): ...

WordPress Plugin Top 10: Cross-Site Request Forgery Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2023-11901

Name of the Vulnerable Software and Affected Versions The Top 10 plugin for WordPress versions up to, and including, 2.10.4 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the tptn export tables function. This allows unauthenticated...