CVE-2026-80467 Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticated visitors to register an account with...

CVE-2026-80467

CVE-2026-80467 affects the Advanced Custom Fields: Extended WordPress plugin, versions 0.9.2.2 through 0.9.2.6 . The plugin's front-end user insert forms fail to restrict the role submitted to those the form actually offers, and its safeguard against privileged roles is incomplete. This allows un...

EUVD-2026-69846

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticated visitors to register an account with...

CVE-2026-12526 Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action of its front-end Forms module; it only checks a capability when the submitted role is administrator or superadmin. On a...

CVE-2026-12526

Advanced Custom Fields: Extended WordPress plugin versions before 0.9.2.7 contain an authorization bypass in the update-user action of its front-end Forms module. The plugin only enforces a capability check when the submitted role is administrator or super_admin , failing to verify that the reque...

EUVD-2026-69871

The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the update-user action of its front-end Forms module; it only checks a capability when the submitted role is administrator or superadmin. On a...

BUI-select-xss

BUI-select-xss cve-2018-8108 보안 테스트 중 우연히 발견한 문제입니다. bui는 프런트엔드 프레임워크로, 많은 기업에서 이 프레임워크를 사용하여 자체 프런트엔드를 구축하고 있습니다. 일반적으로 xss를 방어하는 방법은 사용자 입력을 불신 원칙에 따라 일괄 처리하고, 출력 시 이스케이프escape하여 프런트엔드 페이지에 전달해 표시하는 것입니다. 하지만 bui의 select 컴포넌트는 이 출력 부분을 표시할 때, 이미 이스케이프된 사용자 입력을 다시 역이스케이프un-escape하여 xss 페이로드가 기존 ...

CVE-2025-47646

إثبات المفهوم CVE-2025-47646 استغلال تصعيد الامتيازات غير المُصادق عليه لملحق WordPress PSW Front-end Login Registration Plugin الإصدار ≤ 1.12 📖 الوصف هذا النص البرمجي بايثون هو استغلال إثبات المفهوم PoC لـ CVE-2025-47646 ، يستهدف ثغرة في ملحق WordPress PSW Front-end Login Registration Plugin...

CVE-2025-63588

CVE-2025-63588 Cross-Site Scripting XSS Réfléchi dans la gestion du chemin cmsimplexh de CMSimpleXH CVSS v3.1 estimé : AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 Moyen CVE attribué : CVE-2025-63588 Produits : CMSimpleXH - 1.8 Éditeur : CMSimpleXH - https://www.cmsimple-xh.org/ Résumé Une...

CVE-2025-2005

WordPress FEUP Arbitrary File Upload Exploit CVE-2025-2005 Ce dépôt fournit un exploit Proof of Concept PoC pour le plugin WordPress Front End Users versions jusqu'à 3.2.32, qui est vulnérable au téléchargement arbitraire de fichiers en raison de l'absence de validation MIME/type de fichier dans...

CVE-2025-2005

CVE-2025-2005 WordPress Front End Users Plugin = 3.2.32 est vulnérable à un téléchargement arbitraire de fichiers Exploit du plugin WordPress Front-End Users Informations sur la vulnérabilité Nom du plugin : Front-End Users Plugin Version concernée : = 3.2.32 Type de vulnérabilité : Téléchargemen...

CVE-2026-76548 Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth Bypass

The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticated visitors capabilities reserved to privileged roles. This allows them to list the site's media library and to modify unpublished posts, pages and media item...

CVE-2026-77029

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

EUVD-2026-63934

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029 Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66

Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo 4.1.66...

CVE-2026-77029

Zoo , a Joomla extension by yootheme.com , is affected by a missing CSRF token vulnerability on front-end state changes in versions prior to 4.1.66 . The CVSS 4.0 base score is 4.6 (MEDIUM) , with high privileges and active user interaction required, resulting in low integrity impact . No exploit...

CVE-2026-14325

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...

CVE-2026-14325

CVE-2026-14325 is a stored XSS vulnerability in the Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin, affecting versions prior to 1.3.9.9 . The root cause is a failure to escape the drag_n_drop_heading_tag setting before using it as an HTML tag name in front-end output. An a...

CVE-2026-14325 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag Setting

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not escape one of its settings before using it as an HTML tag name in front-end output, allowing users with administrator access to inject arbitrary web scripts that execute on any front-end page...