Lucene search
+L

5865 matches found

Kitploit
Kitploit
•added 2026/09/01 1:08 p.m.•19 views

seer snap-latest

Introduction Seer - a gui frontend to gdb for Linux. Ernie Pasveer [email protected] This project is actively worked on. The aim is a simple, yet pleasing gui to gdb. Please report any bugs or desired features to my email or create a task in my GitHub project page. Installation Seer can be...

6.4AI score
SaveExploits0References10
Patchstack
Patchstack
•added 2026/09/01 7:59 a.m.•12 views

WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by VanTastic in WordPress Plugin WP User Frontend versions = 4.3.10...

8.8CVSS5.9AI score0.00518EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/01 5:17 a.m.•20 views

CVE-2026-19952

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS0.00963EPSS
SaveExploits1References8
NVD
NVD
•added 2026/09/01 5:17 a.m.•14 views

CVE-2026-12747

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00201EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/01 4:27 a.m.•16 views

EUVD-2026-68978

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00201EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/01 4:27 a.m.•22 views

CVE-2026-12747

The Frontend Admin by DynamiApps plugin for WordPress (versions ≤ 3.29.11) is affected by an authenticated Stored Cross-Site Scripting vulnerability via the 'tag' Shortcode Attribute , caused by insufficient input sanitization and output escaping. Attackers with contributor-level access or higher...

6.4CVSS6AI score0.00201EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/01 4:27 a.m.•13 views

CVE-2026-12747 Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00201EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/01 4:27 a.m.•48 views

CVE-2026-12747 Frontend Admin by DynamiApps <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00201EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/01 4:27 a.m.•19 views

EUVD-2026-68973

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS6.4AI score0.00963EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2026/09/01 4:27 a.m.•61 views

CVE-2026-19952 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS0.00963EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2026/09/01 4:27 a.m.•27 views

CVE-2026-19952 Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS6.3AI score0.00963EPSS
SaveExploits1References8
CVE
CVE
•added 2026/09/01 4:27 a.m.•42 views

CVE-2026-19952

The Frontend Admin by DynamiApps WordPress plugin (versions ≤ 3.29.12 ) is vulnerable to unauthenticated arbitrary file deletion caused by insufficient file path validation in the move_folders function, specifically via the custom_directory_name Merge Tag. Discovered by nudien , the flaw allows a...

7.5CVSS6.2AI score0.00963EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•6 views

CVE-2026-12747: Improper Neutralization of Input During Web Page Generation

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00201EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•9 views

CVE-2026-19952: Improper Limitation of a Pathname to a Restricted Directory

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the movefolders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated attackers to delete arbitrary files on the...

7.5CVSS6.3AI score0.00963EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•22 views

PT-2026-84099

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tag' Shortcode Attribute in all versions up to, and including, 3.29.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6AI score0.00201EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2026/08/31 4:42 p.m.•26 views

WordPress Frontend Admin by DynamiApps plugin <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag vulnerability

Unauthenticated Arbitrary File Deletion via Path Traversal via customdirectoryname Merge Tag vulnerability discovered by nudien in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.12...

7.5CVSS5.9AI score0.00963EPSS
SaveExploits1References1Affected Software1
Patchstack
Patchstack
•added 2026/08/31 4:15 p.m.•15 views

WordPress Frontend Admin by DynamiApps plugin <= 3.29.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'tag' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Frontend Admin by DynamiApps versions = 3.29.11...

6.4CVSS5.9AI score0.00201EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/08/31 2:12 p.m.•17 views

CVE-2026-61711

A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...

6.3CVSS5.9AI score0.00357EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2026/08/31 12:56 p.m.•15 views

WordPress Frontend Admin by DynamiApps plugin < 3.29.11 - Subscriber+ Arbitrary Membership Plan Deletion vulnerability

Subscriber+ Arbitrary Membership Plan Deletion vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Frontend Admin by DynamiApps versions 3.29.11...

4.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•32 views

PT-2026-84108

Name of the Vulnerable Software and Affected Versions Frontend Admin by DynamiApps versions prior to 3.29.13 Description Insufficient file path validation in the move folders function allows unauthenticated attackers to delete arbitrary files on the server. This issue is exploitable when a form i...

7.5CVSS6.1AI score0.00963EPSS
SaveExploits1References16
Rows per page
Query Builder