569 matches found
CVE-2026-76072: Incomplete List of Disallowed Inputs
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...
PT-2026-80986
The Continue CLI applies an incomplete denylist as its only barrier to destructive shell commands when running unattended. In headless mode and auto mode the default policy in extensions/cli/src/permissions/defaultPolicies.ts grants the Bash tool the allow permission, and permissionChecker.ts...
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28149 WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28149 WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
EUVD-2026-57947
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28149
The CVE-2026-28149 entry covers an Unauthenticated PHP Object Injection in the WordPress Headless Single Sign On plugin versions <= 1.6. The underlying issue is a PHP object injection vulnerability that can be exploited without authentication, leading to high impact on confidentiality, integri...
CVE-2026-28148 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148 WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148
CVE-2026-28148 affects the WordPress Headless Single Sign On plugin (versions 1.6 and earlier). The vulnerability is an unauthenticated bypass that could allow an attacker to bypass authentication, with CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, CRITICAL). Connected records do ...
EUVD-2026-57946
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148: Improper Verification of Cryptographic Signature
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
PT-2026-71513
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
PT-2026-71512
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28149: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Headless Single Sign On versions = 1.6...
WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Asim Alshaya in WordPress Plugin Headless Single Sign On versions = 1.6...