36193 matches found
CVE-2026-10780 Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attribute
The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the staticblockcontent shortcode handler retrieving a post via getpost using an attacker-supplied 'id' attribute and outputting its postcontent without...
Chromium: CVE-2026-11688 Object lifecycle issue in SVG
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2026-50088
Name of the Vulnerable Software and Affected Versions Nifty versions 1.4.1 and earlier Description Unauthenticated PHP Object Injection allows an attacker to inject malicious objects into the application. PHP Object Injection occurs when user-supplied input is passed to the unserialize function...
PT-2026-50097
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
PT-2026-49692
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description A spoofing issue exists within the DOM: Core & HTML component...
PT-2026-50094
Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...
PT-2026-50098
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
PT-2026-49668
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description JIT miscompilation occurs in the DOM: Core & HTML...
PT-2026-49685
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Thunderbird versions prior to 152 Description A mitigation bypass exists within the DOM security component...
KLA91103 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Memor...
PT-2026-50106
Unauthenticated PHP Object Injection in Playroom = 1.4.1 versions...
PT-2026-49611
Name of the Vulnerable Software and Affected Versions Static Block versions prior to 2.3 Description The Static Block plugin for WordPress contains an Insecure Direct Object Reference. This occurs because the static block content shortcode handler uses the get post function to retrieve a post bas...
PT-2026-50102
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
PT-2026-50095
Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...
PT-2026-50085
Contributor PHP Object Injection in Avada = 3.15.3 versions...
PT-2026-50108
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
PT-2026-50115
Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...
PT-2026-50117
Unauthenticated PHP Object Injection in Behold = 1.5 versions...