964 matches found
EUVD-2026-65302
The Fluent Support Pro plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized acti...
CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78279
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78278
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78279 WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
EUVD-2026-64786
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78279
CVE-2026-78279 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Fluent Support Pro , affecting versions ≤ 2.3.1 . The vulnerability was discovered by Ananda Dhakal (Patchstack). A CVSS 3.1 score of 5.4 (Medium) is assigned, with a network vector, low a...
EUVD-2026-64785
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78278
Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...
CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78272
CVE-2026-78272 is a Subscriber Broken Access Control vulnerability in the Fluent Support Pro WordPress plugin, affecting versions
EUVD-2026-64836
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Boards Pro versions = 2.0.11...
WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support Pro versions = 2.3.1...
WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support Pro versions = 2.3.1...
AZL-97458 CVE-2026-72854 affecting package fluent-bit 3.1.10-6
msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: cluster-autoscaler, cert-manager, vcluster, k3s, external-secrets-operator, istio, kube-vip-cloud-provider, pulumi-kubernetes-operator, tekton-pipelines, tetragon, emissary, kube-rbac-proxy, cluster-api-aws-controller, cloud-provider-azure,...