94 matches found
CVE-2026-11354
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
EUVD-2026-48466
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
CVE-2026-11354 Participants Database <= 2.7.8.3 - Missing Authorization to Unauthenticated Arbitrary Record Update / Sensitive Information Exposure via 'id' Parameter
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
CVE-2026-11354
The CVE-2026-11354 entry affects the WordPress plugin Participants Database (versions up to 2.7.8.3). The vulnerability is a Missing Authorization issue via the id parameter, allowing unauthenticated attackers to overwrite arbitrary participant records and redirect the private_id‑bearing record-a...
CVE-2026-11354
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the...
PT-2026-64224
The Participants Database plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8.3 via the 'id' parameter. This makes it possible for unauthenticated attackers to overwrite arbitrary participant records by numeric ID and redirect the priva...
EUVD-2026-48201
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.3 versions...
CVE-2026-59555
CVE-2026-59555 affects WordPress: Participants Database plugin version
EUVD-2026-48191
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-59525
The CVE covers the WordPress plugin Participants Database (affected version:
EUVD-2026-48161
Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...
CVE-2026-27423
Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-31235
Cross-Site Request Forgery CSRF vulnerability in Roland Barker, xnau webdesign Participants Database plugin = 2.4.9 versions...
EUVD-2020-29444
Malware in sbrugna...
EUVD-2014-3894
Malware in sbrugna...
EUVD-2017-5638
Malware in sbrugna...
EUVD-2025-30622
Malicious code in bioql PyPI...
EUVD-2023-35550
Malicious code in bioql PyPI...