23890 matches found
CVE-2026-110373
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110373
The Hamid Alinia Login with phone number WordPress plugin is vulnerable to Privilege Escalation due to an Incorrect Privilege Assignment (CWE-266) vulnerability. This issue affects versions up to and including 1.8.77 . An attacker could potentially gain elevated privileges within the application....
EUVD-2026-103432
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110373 WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
ROOT-OS-DEBIAN-12-CVE-2024-26661 CVE-2024-26661 in linux - Patched by Root
Root has patched CVE-2024-26661 in the linux package for Root:Debian:12. Multiple fixed versions available...
WordPress Login with Phone Number 1.7.16 Password Reset
WordPress Login With Phone Number plugin versions 1.7.16 and prior contain an unauthorized account password change vulnerability that may allow privilege escalation. Included is a proof of concept. https://packetstorm.news/download/236159...
PT-2026-116592
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
CVE-2026-110373: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: from n/a through 1.8.77...
Hamid Alinia Login With Phone Number: Permissions, permissions grants, and access control issues
Hamid Alinia Login With Phone Number has vulnerabilities related to permission allocation and access control. These vulnerabilities stem from improper permission assignment, which may lead to unauthorized privilege escalation...
Exploit for CVE-2024-32507
CVE-2024-32507: login-with-phone-number Unauthenticated Passwo...
ROOT-OS-DEBIAN-13-CVE-2025-68339 CVE-2025-68339 in linux - Patched by Root
Root has patched CVE-2025-68339 in the linux package for Root:Debian:13. Multiple fixed versions available...
PT-2026-116351
Name of the Vulnerable Software and Affected Versions EU VAT Assistant for WooCommerce versions prior to 2.1.30.260414 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where malicious scripts ar...
WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Peter Tang in WordPress Plugin Login with phone number versions = 1.8.77...
DoS (Denial of Service) com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core Dependency in Jira Service Management Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticate...
DoS (Denial of Service) com.fasterxml.jackson.core:jackson-core, tools.jackson.core:jackson-core Dependency in Jira Software Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N allows an...
CVE-2026-111611: Authorization Bypass Through User-Controlled Key
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders...
PT-2026-116010
roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to the pay cancel or continue endpoints to close pending orders...
CVE-2026-110374
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...
EUVD-2026-102253
Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...