Lucene search
K

79 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:12 p.m.1 views

CVE-2026-3023

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

8.8CVSS5.9AI score0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.0 views

EUVD-2026-12395

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

5.3CVSS5.9AI score0.00045EPSS
Exploits0References2
NVD
NVD
added 2026/03/16 2:19 p.m.1 views

CVE-2026-3023

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

8.8CVSS0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/16 10:12 a.m.21 views

CVE-2026-3023 Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

5.3CVSS0.00045EPSS
Exploits0References1
CVE
CVE
added 2026/03/16 10:12 a.m.5 views

CVE-2026-3023

CVE-2026-3023 affects the Wakyma web application, specifically the endpoint VetS.wakyma.com/pets/print-tags. The issue is a NoSQL injection (NoSQLi) in a POST request that authenticated users can abuse to inject NoSQL commands, enabling listing of pets and owner names. Multiple connected entries ...

8.8CVSS5.9AI score0.00045EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/16 10:12 a.m.1 views

CVE-2026-3023 Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

5.3CVSS5.9AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/16 10:12 a.m.1 views

CVE-2026-3023

Non-relational SQL injection vulnerability NoSQLi in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands,...

5.3CVSS5.9AI score0.00045EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.2 views

Wakyma 安全漏洞

Wakyma is a pet management application developed by the Spanish company Wakyma. There is a security vulnerability in Wakyma, which stems from a non-relational database injection in the endpoint vets.wakyma.com/pets/print-tags. This vulnerability could allow authenticated users to list pets and...

8.8CVSS5.8AI score0.00045EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/16 12:0 a.m.1 views

PT-2026-25672

Name of the Vulnerable Software and Affected Versions Wakyma affected versions not specified Description A non-relational SQL injection NoSQLi issue exists in the Wakyma web application. An authenticated user can modify a POST request sent to the ''vets.wakyma.com/pets/print-tags'' endpoint to...

8.8CVSS5.8AI score0.00045EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/06 7:53 a.m.1 views

CVE-2026-22453

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through = 2.3...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.1 views

EUVD-2026-9574

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through = 2.3...

5.9AI score0.00061EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.1 views

CVE-2026-22453

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through = 2.3...

9.8CVSS0.00061EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.0 views

CVE-2026-22453 WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through = 2.3...

5.8AI score0.00061EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.4 views

CVE-2026-22453

CVE-2026-22453 is a deserialization-based PHP Object Injection vulnerability in the ThemeREX Pets Club WordPress theme (Pets Club) affecting versions up to 2.3. The issue arises from deserializing untrusted data, enabling object injection. The vulnerability is rated critical (CVSS 3.1 9.8) with n...

9.8CVSS5.9AI score0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.26 views

CVE-2026-22453 WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through = 2.3...

9.8CVSS0.00061EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin Pets Club 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

9.8CVSS5.9AI score0.00061EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.1 views

PT-2026-23195

Name of the Vulnerable Software and Affected Versions ThemeREX Pets Club versions prior to 2.3 Description A flaw exists in ThemeREX Pets Club that allows for object injection due to deserialization of untrusted data. This issue impacts the petclub component. Recommendations Update to a version...

5.8AI score0.00061EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/03/03 12:20 p.m.3 views

WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pets Club versions = 2.3...

9.8CVSS6AI score0.00061EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.2 views

CVE-2025-69064

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pets Land petsland allows PHP Local File Inclusion.This issue affects Pets Land: from n/a through = 1.2.8...

8.1CVSS5.5AI score0.00222EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.1 views

CVE-2025-69064

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Pets Land petsland allows PHP Local File Inclusion.This issue affects Pets Land: from n/a through = 1.2.8...

8.1CVSS0.00222EPSS
Exploits0References1
Rows per page
Query Builder