72710 matches found
CVE-2026-12094 Advanced Contact Form 7 <= 1.0.0 - Missing Authorization to Unauthenticated Arbitrary Contact Form Submission Deletion via 'form_id' Parameter
The Advanced Contact Form 7 - Compact DB plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the cf7cdbajaxdeleteuser function in versions up to, and including, 1.0.0. The handler is registered against both wpajaxcf7cdbdelete and...
CVE-2026-9175
The CVE concerns the WordPress plugin Devs Accounting – Simple Accounting and Invoicing Solution, affected versions up to 1.2.0. The root cause is a REST endpoint get-account in get_single_account() where the permission_callback unconditionally returns true, resulting in missing authorization for...
GHSA-44WP-G8F4-F4V5
creationtimestamp| type| source ---|---|--- 2026-06-24 04:42:12+00:00| seen| https://gist.github.com/alon710/f3efb3a6eb14f85378da7277ba2da374...
GHSA-WCMJ-X466-56MM
creationtimestamp| type| source ---|---|--- 2026-06-24 03:42:03+00:00| seen| https://gist.github.com/alon710/930931f8715581f8f0d0a4111bb621a6...
CVE-2026-53662
creationtimestamp| type| source ---|---|--- 2026-06-24 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116802848530420895...
ECHO-4E4C-B37E-F35F
Bulletin has no description...
PT-2026-51685
Name of the Vulnerable Software and Affected Versions RentMy Real-Time Rental Management Plugin versions prior to 4.0.4.2 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attacke...
CVE-2025-60468
Removed by vendor...
PT-2026-52036
Name of the Vulnerable Software and Affected Versions AnythingLLM versions 1.11.1 through 1.14.0 Description An issue exists where the application fails to perform ownership checks when deleting parsed files. Specifically, the 'POST /api/workspace/:slug/embed-parsed-file/:fileId' endpoint deletes...
PT-2026-52081
Name of the Vulnerable Software and Affected Versions Twenty versions prior to 2.9.0 Description An insecure direct object reference IDOR exists in the AI agent monitor's AgentTurnResolver and the agent-turn-grader.service.ts file. The agentTurnsagentId query and the evaluateAgentTurnturnId...
RHEL 9 : Red Hat Ansible Automation Platform 2.6 Product Security Update (Critical) (RHSA-2026:28377)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28377 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can...
MINI-V93Q-6867-PJ79
Bulletin has no description...
MINI-8R69-447J-G8W5
Bulletin has no description...
MINI-G5G6-3H3F-VW35
Bulletin has no description...
MINI-GH64-FC88-2547
Bulletin has no description...
MINI-MFMC-W52H-CQM6
Bulletin has no description...
MINI-MRCJ-W8C9-95H6
Bulletin has no description...
MINI-5C6C-M97W-MQMP
Bulletin has no description...