3 matches found
symfony/ux-autocomplete Information exposure via unescaped LIKE wildcards in EntitySearchUtil
More info at https://github.com/symfony/ux/security/advisories/GHSA-946h-jp5c-8fvh...
EUVD-2026-11753
wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending POST requests to the wpdAddSubscription handler in class.WpdiscuzHelperAjax.php. Attackers can exploit LIKE wildcard...
CVE-2026-22216
wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notifications by sending POST requests to the wpdAddSubscription handler in class.WpdiscuzHelperAjax.php. Attackers can exploit LIKE wildcard...