CVE-2026-81346

The Frontend Admin by DynamiApps WordPress plugin, prior to version 3.29.11 , fails to perform a capability check on one of its AJAX actions . This missing authorization check allows any authenticated user with the Subscriber role or higher to delete arbitrary membership plans . The root cause is...

EUVD-2026-68040

The MemberHero WordPress plugin through 6.9 does not restrict which account fields can be supplied during its frontend registration process, allowing unauthenticated attackers to register a new user with an arbitrary role, including Administrator, leading to a full site takeover. Version 6.9 is...

CollaRE

CollaRE v1.4 Introduzione CollaRE è uno strumento per il reverse engineering collaborativo che consente ai team che devono usare più di un tool durante un progetto di collaborare senza la necessità di condividere i file in una posizione separata. Include anche una gestione utenti molto semplice e...

CVE-2026-54745

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-82276 StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...

CVE-2026-82276 StarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...

CVE-2025-13342

CVE-2025-13342 Frontend Admin di DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...

CVE-2024-6244

🚀 pz-frontend-manager = 1.0.5 - Exploit CSRF dell'immagine del profilo 🛠️ Descrizione Questo script sfrutta una vulnerabilità CSRF nel plugin WordPress pz-frontend-manager versioni = 1.0.5 per modificare l'immagine del profilo di un utente autenticato senza il suo consenso. 🔴 CVE-2024-6244 Il...

WordPress User Frontend plugin < 4.3.10 - Editor+ PHP Object Injection vulnerability

Editor+ PHP Object Injection vulnerability discovered by Hijun Kim in WordPress Plugin WP User Frontend versions 4.3.10...

k4_cve-2023-41064

k4cve-2023-41064 Passaggi per eseguire il progetto Configurazione del frontend: Vai nella cartella del frontend: bash Copier Modifier cd frontend Installa le dipendenze Node.js richieste eseguendo: bash Copier Modifier npm install Configurazione del backend: Vai nella cartella del backend: bash...

CVE-2026-14567

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

CVE-2026-14558

The User Frontend WordPress plugin before 4.3.10 does not properly validate field type definitions and deserialises user-controlled post metadata when rendering submitted posts, allowing users with Editor-level access and above to inject arbitrary PHP objects, which can lead to remote code...

LavaDome

LavaDome 🌋️ Uma nova ferramentaLavaMoat para E ncapsulamento s eguro de nós do DOM ⚠️ EXPERIMENTAL WIP - USE POR SUA CONTA E RISCO saiba mais Demo Tente quebrar oLavaDome - visite o aplicativo de demonstração, abra o console e faça tudo ao seu alcance para roubar o segredo de dentro da instância...

yaradbg-frontend

परिचय YaraDbg एक निःशुल्क वेब-आधारित Yara डीबगर है जो सुरक्षा विश्लेषकों को कम प्रयास और अधिक आत्मविश्वास के साथ हंटिंग या डिटेक्शन नियम लिखने में मदद करता है। YaraDbg का उपयोग करके, आप यह पता लगा सकते हैं कि आपके कुछ Yara नियम किसी विशिष्ट फ़ाइल के साथ क्यों मेल खाते हैं या क्यों नहीं खाते हैं, ...

zentao-getshell

zentao-getshell ZenTao 8.2 - 9.2.1 Getshell dal frontend Utilizzo Python python exp.py http://127.0.0.1:81/ jas502n.php...

phpweb

phpweb Frontend: Upload beliebiger Dateien...

EUVD-2026-67568

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

CVE-2026-14567 WP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory

The User Frontend WordPress plugin before 4.3.10 does not restrict access to its user directory search endpoint, allowing unauthenticated attackers to retrieve the email address and phone number of every registered user, including administrators...

CVE-2026-14567

CVE-2026-14567 affects the WP User Frontend WordPress plugin in versions prior to 4.3.10 . The vulnerability stems from an unrestricted user directory search endpoint , which allows unauthenticated attackers to retrieve the email address and phone number of every registered user, including site a...

WordPress User Frontend plugin < 4.3.10 - Unauthenticated User Email and Phone Disclosure vulnerability

Unauthenticated User Email and Phone Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin WP User Frontend versions 4.3.10...