Lucene search
+L

23890 matches found

NVD
NVD
•added 2026/10/18 11:16 a.m.•10 views

CVE-2026-110373

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS0.00335EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/18 11:00 a.m.•6 views

CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/18 11:00 a.m.•18 views

CVE-2026-110373

The Hamid Alinia Login with phone number WordPress plugin is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266) vulnerability. This issue affects versions up to and including 1.8.77 . An attacker could potentially gain elevated privileges within the application....

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/18 11:00 a.m.•11 views

EUVD-2026-103432

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/18 11:00 a.m.•31 views

CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS0.00335EPSS
SaveExploits0References1
osv_root
osv_root
•added 2026/10/18 3:18 a.m.•17 views

ROOT-OS-DEBIAN-12-CVE-2024-26661 CVE-2024-26661 in linux - Patched by Root

Root has patched CVE-2024-26661 in the linux package for Root:Debian:12. Multiple fixed versions available...

5.5CVSS6.1AI score0.00225EPSS
SaveExploits0
Packet Storm
Packet Storm
•added 2026/10/18 12:00 a.m.•21 views

WordPress Login with Phone Number 1.7.16 Password Reset

WordPress Login With Phone Number plugin versions 1.7.16 and prior contain an unauthorized account password change vulnerability that may allow privilege escalation. Included is a proof of concept. https://packetstorm.news/download/236159...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•14 views

PT-2026-116592

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•6 views

CVE-2026-110373: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/10/17 4:00 p.m.•8 views

Hamid Alinia Login With Phone Number: Permissions, permissions grants, and access control issues

Hamid Alinia Login With Phone Number has vulnerabilities related to permission allocation and access control. These vulnerabilities stem from improper permission assignment, which may lead to unauthorized privilege escalation...

8.1CVSS5.9AI score0.00335EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/10/17 2:55 p.m.•27 views

Exploit for CVE-2024-32507

CVE-2024-32507: login-with-phone-number Unauthenticated Passwo...

8.8CVSS6.2AI score0.00457EPSS
SaveExploits1
osv_root
osv_root
•added 2026/10/17 3:26 a.m.•20 views

ROOT-OS-DEBIAN-13-CVE-2025-68339 CVE-2025-68339 in linux - Patched by Root

Root has patched CVE-2025-68339 in the linux package for Root:Debian:13. Multiple fixed versions available...

7.1AI score0.00193EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/17 12:00 a.m.•12 views

PT-2026-116351

Name of the Vulnerable Software and Affected Versions EU VAT Assistant for WooCommerce versions prior to 2.1.30.260414 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious scripts ar...

7.2CVSS5.9AI score0.00241EPSS
SaveExploits0References10
Patchstack
Patchstack
•added 2026/10/16 10:41 a.m.•14 views

WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Peter Tang in WordPress Plugin Login with phone number versions = 1.8.77...

8.1CVSS5.8AI score0.00335EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2026/10/16 1:45 a.m.•10 views

DoS (Denial of Service) com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticate...

6.9CVSS6.2AI score0.00408EPSS
SaveExploits0
Atlassian
Atlassian
•added 2026/10/16 1:45 a.m.•10 views

DoS (Denial of Service) com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N allows an...

6.9CVSS6.2AI score0.00408EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/16 12:00 a.m.•7 views

CVE-2026-111611: Authorization Bypass Through User-Controlled Key

roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders...

5.4CVSS5.9AI score0.00223EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•13 views

PT-2026-116010

roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders...

5.4CVSS5.9AI score0.00223EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/15 7:17 p.m.•10 views

CVE-2026-110374

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...

4.3CVSS0.00185EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 6:18 p.m.•13 views

EUVD-2026-102253

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...

4.3CVSS5.9AI score0.00185EPSS
SaveExploits0References1
Rows per page
Query Builder