231608 matches found
CVE-2022-47150
CVE-2022-47150 concerns CSRF in WordPress plugins referencing WooCommerce Conversion Tracking. Affected product: WooCommerce Conversion Tracking plugin for WordPress, versions up to and including 2.0.10. Underlying issue: Cross-Site Request Forgery, enabling unauthenticated or unauthorized action...
CVE-2022-44630
The CVE-2022-44630 entry pertains to the WordPress plugin YITH WooCommerce Product Slider Carousel (vulnerable:
CVE-2022-42479
CVE-2022-42479 concerns a Broken Access Control in WordPress Soledad premium theme versions
CVE-2023-33999
The WPVibes WP Mail Log WordPress plugin, versions 1.0.2 and below , is vulnerable to DOM-based Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This flaw allows an attacker to execute malicious scripts in the victim's browser. Additionally, multiple ...
CVE-2022-41656
CVE-2022-41656 describes a Missing Authorization vulnerability in the WordPress plugin Account Manager for WooCommerce . Affected versions are up to 2.1.2 (per CVE notices) with a broken access control that allows exploiting incorrectly configured access levels. The core issue is missing authoriz...
@8btc/excalidraw (>=0.18.0-beta.0, <=0.18.0-beta.4), @airmix/mcp-excalidraw-server (1.0.6) +244 more potentially affected by CVE-2026-41159 via mermaid (>=10.0.0, <=10.9.5)
mermaid NPM version =10.0.0, =0.18.0-beta.0, =0.17.0-alkemio-1, =1.0.0, =0.18.3, =0.18.0-1, =0.0.1-BETA, =0.18.1, =1.1.4, =0.17.1, =0.0.19, =0.0.1, =0.0.1, =3.0.0, =8.0.1 and more Source cves: CVE-2026-41159 Source advisory: SNYK:JS-MERMAID-16642055...
CVE-2023-42343
Alkacon OpenCms versions prior to 10.5.1 are vulnerable to a Cross-Site Scripting (XSS) vulnerability via the cmis-online/type module. The root cause is a lack of sufficient measures to protect the website structure, specifically allowing unauthenticated attackers to inject malicious JavaScript t...
CVE-2023-42344
Alkacon OpenCMS versions prior to 10.5.1 (specifically research indicates 9.0.0 to 10.5.0 ) are vulnerable to an unauthenticated XML External Entity (XXE) attack. The root cause is improper limitation of XML links to external objects via the cmis-online/query endpoint on a Chemistry servlet . Exp...
CVE-2026-3109
creationtimestamp| type| source ---|---|--- 2026-03-27 03:00:09+00:00| seen| https://nvd.nist.gov/vuln/detail/CVE-2026-4274...
CVE-2026-4749
NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0...
CVE-2026-4749: Undefined Security Weakness
NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0...
CVE-2024-31328
A logic error in the broadcastIntentLockedTraced function of BroadcastController.java within the Framework component of Google Wear OS allows an attacker to launch arbitrary activities from the background on a paired companion phone. This vulnerability can lead to local escalation of privilege wi...
Exploit for CVE-2023-1234
Poc Hunter A vulnerability/proof of concept PoC search tool...
PT-2026-1869
Name of the Vulnerable Software and Affected Versions Intelbras CFTV IP NVD 9032 R Ftd version 2.800.00IB00C.0.T Description A security issue exists in Intelbras CFTV IP NVD 9032 R Ftd version 2.800.00IB00C.0.T that allows an unauthenticated attacker to bypass the multi-factor authentication MFA...
CVE-2025-67070: Authentication Bypass Using an Alternate Path or Channel
A vulnerability exists in Intelbras CFTV IP NVD 9032 R Ftd V2.800.00IB00C.0.T, which allows an unauthenticated attacker to bypass the multi-factor authentication MFA mechanism during the password recovery process. This results in the ability to change the admin password and gain full access to th...
CVE-2024-23511
CVE-2024-23511 describes a DOM-based XSS in POSIMYTH The Plus Addons for Elementor Page Builder Lite. Affected product: The Plus Addons for Elementor Page Builder Lite (WordPress plugin) with versions up to and including 5.3.3. Root cause: improper input handling during web page generation leadin...
CVE-2023-52212
CVE-2023-52212 describes a Cross-Site Request Forgery (CSRF) vulnerability in Automattic WP Job Manager, affecting versions up to 2.0.0. The connected sources identify WP Job Manager as the affected product, with the root cause being CSRF in the plugin’s handling of requests, enabling CSRF under ...
CVE-2023-50897
CVE-2023-50897 concerns the WordPress plugin Media File Renamer (WordPress plugin “Media File Renamer”). The vulnerability is described as an Unrestricted Upload of File with Dangerous Type that enables an attacker to perform an arbitrary file rename, which can lead to a Remote Code Execution (RC...
