Lucene search
+L

744 matches found

CNNVD
CNNVD
added 2026/01/22 12:00 a.m.14 views

WordPress plugin “Hotel Listing” has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.6CVSS5.8AI score0.00338EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.16 views

WordPress plugin Solace security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.5CVSS5.8AI score0.00323EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.23 views

WordPress plugin Peach Payments Gateway has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.13 views

WordPress plugin “Hotel Listing” has security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.3CVSS5.8AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.16 views

WordPress plugin Payment Gateway bKash for WC has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.3CVSS5.8AI score0.00292EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.13 views

WordPress plugin Apimo Connector has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

5.3CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.16 views

WordPress plugin for GDPR CCPA Compliance Support has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.12 views

WordPress plugin OnePay Payment Gateway for WooCommerce has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.17 views

WordPress plugin WPMasterToolKit has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.15 views

WordPress plugin HomeLancer has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.4CVSS5.8AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/21 11:23 p.m.38 views

CVE-2026-1036

CVE-2026-1036 (Photo Gallery by 10Web – WordPress) is confirmed in connected sources as a real vulnerability. The WordPress plugin is vulnerable to unauthorized modification of data via delete_comment(), due to a missing capability check. All versions up to and including 1.8.36 are affected. The ...

5.3CVSS5.7AI score0.00223EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/01/19 10:12 p.m.13 views

WordPress weMail plugin <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure vulnerability

Insufficient Authorization via x-wemail-user Header to Sensitive Information Disclosure vulnerability discovered by shark3y in WordPress Plugin weMail versions = 2.0.7...

5.3CVSS5.5AI score0.00278EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/07 9:33 a.m.23 views

CVE-2019-7872

An insecure direct object reference IDOR vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing us...

6.5CVSS6.6AI score0.008EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/30 12:00 a.m.16 views

WordPress plugin ShopMagic 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/20 8:22 a.m.49 views

CVE-2025-12492

The CVE CVE-2025-12492 affects Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin for WordPress. It exposes sensitive information via an unauthenticated AJAX endpoint (ajax_get_members) due to a low-entropy, predictable token (5 hex char...

5.3CVSS5.5AI score0.00508EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/20 12:00 a.m.12 views

WordPress plugin Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

5.3CVSS6AI score0.00508EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/12/19 11:25 a.m.10 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS6.9AI score0.02114EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/18 12:30 p.m.18 views

EUVD-2025-204255

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS6.5AI score0.02114EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/18 11:15 a.m.14 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS5.8AI score0.02114EPSS
SaveExploits1References2
NVD
NVD
added 2025/12/18 11:15 a.m.15 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS0.02114EPSS
SaveExploits1References2
Rows per page
Query Builder