CVE-2026-13736

The NewPath WildApricotPress Add-on WordPress plugin through 1.0.0 does not enforce its members-only field privacy on an unauthenticated REST route, allowing anonymous visitors to read member email addresses and phone numbers that are configured to be visible to members only...

T-Dreams Cars Ads Package 2.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Cars Ads Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:2.0 Price:31$ Contact: [email protected] Website: www.1337db.com Greetings to:...