17251 matches found
EUVD-2026-1063
The MediaPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mpp-uploader shortcode in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
EUVD-2026-1062
The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...
EUVD-2026-1064
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gamipressajaxgetposts and gamipressajaxgetusers functions in all versions up to, and including...
EUVD-2026-1080
The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the 'dirpath' parameter in the 'njt-fastdup/v1/template/directory-tree' REST API endpoint. This makes it possible for authenticated attackers,...
EUVD-2026-1094
The CBX Bookmark & Favorite plugin for WordPress is vulnerable to generic SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
EUVD-2026-0965
In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS10314745; Issue ID: MSV-5553...
GHSA-PHPV-94HG-FV9G
creationtimestamp| type| source ---|---|--- 2026-01-05 21:59:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844736458981138 2026-01-05 23:05:27+00:00| seen| Telegram/DM3pgu0RzgLvzG-bb0EsBJeE-HNavxIR4FBWximsYdDyCg...
CVE-2026-0625
creationtimestamp| type| source ---|---|--- 2026-01-05 21:28:35+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844613054542200 2026-01-05 23:05:33+00:00| published-proof-of-concept| Telegram/SaQdu2HuKivKnxzQDHW0crSXnl1eIl3nAV9Cs1OYgaU4ueA 2026-01-05 23:05:39+00:00| seen|...
GHSA-6G8Q-HP2J-GVWV
creationtimestamp| type| source ---|---|--- 2026-01-05 20:33:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115844394905204282 2026-01-08 14:01:19+00:00| seen| Telegram/MF5MbKH9Dl27A-oSLc1JrD-xlLt5sgTckbUHyznbnX30sc...
CVE-2026-0592
creationtimestamp| type| source ---|---|--- 2026-01-05 15:04:04+00:00| published-proof-of-concept| Telegram/4A1OLCVEL3LZblNWQ64jtWUEZMdTTBgXCaAa5wleCJYgBw 2026-01-05 16:48:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115843511985151727 2026-01-05 17:23:41+00:00| seen|...
EUVD-2026-0877
Missing Authorization vulnerability in WPweb Follow My Blog Post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Follow My Blog Post: from n/a through 2.4.0...
EUVD-2026-0867
Insertion of Sensitive Information Into Sent Data vulnerability in Awethemes AweBooking allows Retrieve Embedded Sensitive Data.This issue affects AweBooking: from n/a through 3.2.26...
EUVD-2026-0895
In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anyone noticing so remove the driver from staging. Specifically, commit 723de0f9171e "staging: most: remove device from...
EUVD-2026-0920
A vulnerability was detected in zhanglun lettura up to 0.1.22. This issue affects some unknown processing of the file src/components/ArticleView/ContentRender.tsx of the component RSS Handler. The manipulation results in cross site scripting. The attack can be executed remotely. This attack is...
EUVD-2026-0785
EUVD-2026-0785...
CVE-2025-64125
creationtimestamp| type| source ---|---|--- 2026-01-03 02:17:44+00:00| seen| Telegram/Ebo-gkPQsU5ZVR88T6c8Czu6pposjvXlMFCvAeF1s7O9Ic 2026-01-03 02:27:00+00:00| seen| Telegram/3Ub9vt3to4CKUoes7wkyrVeu7meuRAQ-g3v994OIXZqD0w 2026-01-03 02:36:13+00:00| seen|...
EUVD-2026-0031
A vulnerability has been found in code-projects Online Music Site 1.0. This affects an unknown function of the file /Frontend/AlbumByCategory.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
EUVD-2026-0056
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...