CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

981432 matches found

Patchstack•added 2026/09/05 6:00 a.m.•8 views

WordPress Accept Stripe Payments plugin < 2.1.4 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Usama Arshad in WordPress Plugin Stripe Payments versions 2.1.4...

4.3CVSS5.2AI score0.00213EPSS

SaveExploits0References1Affected Software1

CVE•added 2026/09/05 6:00 a.m.•15 views

CVE-2026-81423

The Accept Stripe Payments WordPress plugin (versions before 2.1.4 ) is vulnerable to an open redirect via its IPN (Instant Payment Notification) handler , which fails to validate a user-supplied URL before using it in a redirect. This allows unauthenticated attackers to redirect visitors to an a...

4.3CVSS5.4AI score0.00213EPSS

SaveExploits0References1

Vulnrichment•added 2026/09/05 6:00 a.m.•12 views

CVE-2026-81423 Accept Stripe Payments < 2.1.4 - Open Redirect via IPN Handler

The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing...

5.9AI score0.00213EPSS

SaveExploits0References1

EUVD•added 2026/09/05 6:00 a.m.•6 views

EUVD-2026-71854

5.4AI score0.00213EPSS

SaveExploits0References1

Positive Technologies•added 2026/09/05 12:00 a.m.•14 views

PT-2026-86338

🚨 CVE-2026-81423 The Accept Stripe Payments WordPress plugin before 2.1.4 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers to redirect visitors to an arbitrary external website, which can be leveraged for phishing. 🎖@cveNotify...

4.3CVSS5.8AI score0.00213EPSS

SaveExploits0References3

IBM Security Bulletins•added 2026/09/04 10:11 p.m.•7 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-42945 DESCRIPTION: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when the rewrite...

9.2CVSS8.4AI score0.68047EPSS

SaveExploits42Affected Software1

OSV•added 2026/09/04 8:58 p.m.•10 views

GHSA-MFRJ-V65R-979C SiYuan: Publish-access filter on renderAttributeView leaves related-database content unfiltered and fails open on non-block first columns

CVE: This vulnerability corresponds to CVE-2026-72798. Summary renderAttributeView correctly applies the reader publish-access filter, but the filter's row-accessibility decision is keyed solely to the row's first cell, and it never inspects the remaining cells' values. Relation and Rollup cells...

8.6CVSS5.6AI score0.00256EPSS

SaveExploits0References5