1123816 matches found
Exploit for CVE-2026-101767
CVE-2026-101767 — Oracle E-Business Suite TCF SQL Injection...
WhatWeb
WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...
CVE-2026-119096
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the email parameter of the uologinaction function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the...
CVE-2026-116512
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...
CVE-2026-118057
The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUESTURI' parameter in all versions up to, and including, 22.3.2 due to insufficient input sanitization and output escaping. This mak...
CVE-2026-111070
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched article WPCPReadability::parsemeta,...
CVE-2026-103962
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...
Project-Pwnag0dchi
Project Pwnag0dchi Created this since a lot of people were asking about the customized plugins & configurations I use. Following this guide, your Pwnagotchi will look exactly as seen on my socials & YouTube videos in 5mins tops. You'll also find a complete Pwnagotchi noob build guide + some commo...
esp_wifi_repeater
espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...
EUVD-2026-114655
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched article WPCPReadability::parsemeta,...
CVE-2026-111070 Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched article WPCPReadability::parsemeta,...
CVE-2026-111070
The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.2.4 . The issue arises because the plugin extracts the HTML meta description from remotely-fetched articles via WPCP_Readability::...
EUVD-2026-114653
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...
CVE-2026-116512 Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized 'id' parameter value concatenated...
CVE-2026-116512
The Project Manager WordPress plugin (all versions up to and including 4.1.1 ) is vulnerable to Remote Code Execution (RCE) via the 'id' parameter . The root cause is the direct concatenation of an unsanitized 'id' parameter into a pipe-delimited validation rule string. This string is subsequentl...
EUVD-2026-114651
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...
CVE-2026-103962 User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter
The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fieldattrrequired' parameter in all versions up to, and including, 4.3.13 due to...
CVE-2026-103962
The User Frontend WordPress plugin (versions up to and including 4.3.13 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping related to the 'field_attr[required]' parameter. An unauthenticated attacker can inject arbitrary...
EUVD-2026-114649
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via the email parameter of the uologinaction function. This is due to a parser-differential flaw in which the plugin's account-verification gate resolves the...
CVE-2026-119096
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to an Authentication Bypass in versions up to and including 3.8.2 . The vulnerability exists in the uo_login_action() function due to a parser-differential flaw involving the email parameter. While the plugin's account-verificat...