PT-2026-67991

Name of the Vulnerable Software and Affected Versions MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress versions prior to 7.0.4 Description An issue exists where an AJAX action lacks authorization and Cross-Site Request Forgery CSRF checks. This allows any authenticated user,...

CVE-2026-17515: Exposure of Sensitive Information to an Unauthorized Actor

The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin before 7.0.4 does not have authorisation and CSRF checks in one of its AJAX actions, allowing any authenticated user, such as a subscriber, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for Real Esta...

EUVD-2025-178446

Malicious code in import-log-monitor-rho-function npm...

ZOHO ManageEngine EventLog Analyzer Cross-Site Scripting Vulnerability (CNVD-2018-12558)

ZOHO ManageEngine EventLog Analyzer is the United States ZhuoHao ZOHO company's set of system, event log analysis software. The software is capable of network-wide hosts, servers, network equipment and a variety of application service systems and other logs generated by the comprehensive collecti...