411084 matches found
CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
CVE-2026-28151
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-28167
Unauthenticated Arbitrary File Download in Super Forms = 6.3.315 versions...
CVE-2025-63080
Firmware in KAON PG5298A and PG5298B routers allow an authenticated user to send crafted JSON-RPC requests and perform operations not possible via GUI, e.g. system file read or command execution. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...
python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory
A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...
EUVD-2026-64810
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-66670 WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-66670
This is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Måne theme (versions
CVE-2026-66587
WP Cafe Pro is a WordPress plugin affected by an unauthenticated Local File Inclusion (LFI) vulnerability in versions prior to 3.0.15 . Discovered by Ananda Dhakal via Patchstack, the flaw requires no authentication or user interaction and is scored CVSS 9.8 (Critical) with full confidentiality, ...
CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
EUVD-2026-64806
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-32477 WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
EUVD-2026-64801
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
CVE-2026-32477
CVE-2026-32477 is an unauthenticated arbitrary file deletion vulnerability in the WordPress plugin ShopBuilder Pro – Elementor WooCommerce Builder Addons in versions 2.2.0 and earlier . An attacker can delete arbitrary files over the network without authentication or user interaction, leading to ...
CVE-2026-28171 WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
EUVD-2026-64797
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
CVE-2026-28171
CVE-2026-28171 is an unauthenticated arbitrary file deletion vulnerability in the WooCommerce File Approval WordPress plugin, affecting versions 10.7 and earlier . An unauthenticated remote attacker can delete arbitrary files on the server, leading to a high availability impact with changed scope...
CVE-2026-28167
CVE-2026-28167 is an unauthenticated arbitrary file download vulnerability in the WordPress Super Forms plugin affecting versions 6.3.315 and below . The flaw allows a remote attacker to download arbitrary files from the server without authentication, leading to a high confidentiality impact (CVS...