EUVD-2026-83674

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410 Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF

The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability...

CVE-2026-92410

The Sign-up Sheets WordPress plugin before 2.4.0 contains an improper CSRF nonce validation flaw in its sign-up deletion action. An attacker can forge a request that, when processed in the session of a logged-in user with the required capability , deletes sign-up records. The root cause is that t...

CVE-2024-32444

CVE-2024-32444 截至 24/01/25，此漏洞尚未有补丁，因此这只是一个产品检测模板，所有与 RealHome wordpress 主题相关的产品均受影响。 该主题允许用户通过 inspiryajaxregister 函数注册新账户，但它未能正确检查授权或实现 nonce 验证。 如果网站启用了注册功能，攻击者可以在发送给注册函数的特制 HTTP 请求中任意指定其角色为“管理员”，从而绕过安全检查。 一旦注册为管理员，攻击者即可完全控制该 WordPress 站点，包括执行内容篡改、植入脚本以及访问用户或其他敏感数据。 如何运行此脚本？ 1. 从此处下载 Nuclei 2...

CVE-2021-24356

CVE-2021-24356 Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - 订阅者 + 任意插件安装 Description 该插件中的 AJAX 操作缺乏权限检查且 nonce 检查不充分，使得经过身份验证的用户可以在易受攻击的站点上安装任意插件。 使用方法 root@kitploit: $ python3 CVE-2021-24356.py --url http://wordpress.lan --username user --password useruser1 --slug betterlinks Getting...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - 任意文件读取 🔥 漏洞概要 WordPress 插件 File Away 版本 = 3.9.9.0.1 存在未认证的任意文件读取漏洞。 攻击者可通过向插件的 AJAX 端点发送精心构造的请求，读取服务器上的任意文件（例如 wp-config.php）。 该漏洞源于通过 admin-ajax.php 使用 fileaway-stats 操作时，Nonce 校验不当且缺乏路径限制。 攻击者可利用该漏洞获取敏感文件并提取凭据，可能导致完全沦陷。 🔍 受影响插件 插件名称： File Away...

libmongoc SCRAM client nonce-validation bypass

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by...

CVE-2026-93394

libmongoc (MongoDB C driver) contains a flaw in its SCRAM authentication implementation where the client continues the handshake and transmits the client proof even after detecting a nonce mismatch in the server's first message. An attacker with a man-in-the-middle position can inject a crafted s...

EUVD-2026-81353

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin before 5.1.1 does not check the user's capabilities in its message deletion AJAX action, and only tests that a nonce parameter is present rather than validating it, allowing any authenticated user, such as a...

CVE-2026-91010

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms WordPress plugin (versions before 5.1.1 ) fails to check user capabilities in its message deletion AJAX action and only tests that a nonce parameter is present rather than validating it. This allows any authenticated user, in...

CVE-2025-1306

Exploit de Newscrunch CVE-2025-1306 🚨 Descripción general Este exploit apunta a una vulnerabilidad de Cross-Site Request Forgery CSRF a Subida Arbitraria de Archivos CVE-2025-1306 en el tema Newscrunch para WordPress. Debido a la falta de validación de nonce en la función...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: CSRF a Sobrescritura Arbitraria de Archivos en el Plugin Optimole de WordPress Resumen Una vulnerabilidad de Cross-Site Request Forgery CSRF en el plugin Optimole para WordPress versiones = 4.2.5 permite a atacantes no autenticados sobrescribir silenciosamente activos existentes d...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

EUVD-2026-74853

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-80172

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated remote attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens , since there is no nonce valida...

CVE-2026-82185

The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B te...

EUVD-2026-71742

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...

The vulnerability of the validate_timestamp_and_nonce() function in the online training platform Open edX Platform allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...

CVE-2026-53636 Open edX LTI OAuth Replay Attack

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI Learning Tools Interoperability Provider implementation. The validatetimestampandnonce function in...