1020 matches found
CVE-2026-90860
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...
CVE-2026-90860
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...
CVE-2026-90860: Improper Removal of Sensitive Information Before Storage or Transfer
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session...
PT-2026-96044
Name of the Vulnerable Software and Affected Versions Canva Mobile App for HarmonyOS versions prior to 1.15.1 Description The application fails to restrict headers returned to an external origin operating within a privileged WebView. A privileged WebView is a system component that allows the...
PT-2026-95777
Name of the Vulnerable Software and Affected Versions AppMySite – WordPress & WooCommerce Mobile App Builder versions prior to 3.15.4 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with Subscriber-level access and...
CVE-2026-13770: Improper Neutralization of Input During Web Page Generation
The AppMySite – WordPress & WooCommerce Mobile App Builder No-Code Android & iOS App Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via saveamslicensekey AJAX Handler in all versions up to, and including, 3.15.3 due to insufficient input sanitization and output escaping...
Security Bulletin: IBM On Call Manager Mobile Application is affected by a vulnerability in regular expression processing
Summary A vulnerability in the xmldom library affects regular expression processiong for the IBM On Call Manager Android and iOS mobile applications. Vulnerability Details CVEID:CVE-2026-34601 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and...
yj_nearbyglasses v1.0.10
yjnearbyglasses attempting to detect smart glasses nearby and warn you. ⚠ WARNING! ⚠ nearby-glasses-alert.pages.dev is NOT RELATED TO MY PROJECT. Many apps in Play Store and App Store look or are even called very similar to Nearby Glasses. They seem to hijack the name and try to make a quick prof...
CVE-2026-6223
Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 before 2.3...
CVE-2026-6223
CVE-2026-6223 is a CRITICAL (CVSS 9.4) improper restriction of excessive authentication attempts vulnerability in the Bahçelievler Municipality BiHayat App (versions 2.1.7 through 07092026), allowing an OTP bypass that leads to full authentication bypass. The vector is network-based with no privi...
CVE-2026-27330
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
CVE-2026-27330
An unauthenticated Broken Access Control vulnerability affects the WordPress plugin Mobile App for WooCommerce in versions ≤ 0.4.62 , as reported by researcher Phat RiO and cataloged by Patchstack. The flaw allows a remote attacker with no prior authentication or user interaction to access protec...
CVE-2026-27330 WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
EUVD-2026-66987
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
CVE-2026-27330 WordPress Mobile App for WooCommerce plugin <= 0.4.62 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mobile App for WooCommerce = 0.4.62 versions...
WordPress Mobile App for WooCommerce plugin <= 0.4.69 - Other Vulnerability Type vulnerability
Other Vulnerability Type vulnerability discovered by TruongLV1 From FPT Night Wolf in WordPress Plugin Mobile App for WooCommerce versions = 0.4.69...
PT-2026-82441
Name of the Vulnerable Software and Affected Versions Mobile App for WooCommerce versions prior to 0.4.63 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions within the application. Recommendations Update to a version newe...
CVE-2026-16569: Improper Access Control
The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not check the user's capabilities before allowing a stock-update operation through one of its REST endpoints, allowing any authenticated user, such as a customer or subscriber...
CVE-2026-16568: Authorization Bypass Through User-Controlled Key
The Mobile App for WooCommerce: ShopApper Mobile App Builder Service for WooCommerce WordPress plugin through 0.4.62 does not verify that the requesting user owns the customer profile being queried through one of its REST endpoints, allowing any authenticated user e.g. a customer/subscriber to...