36 matches found
CVE-2026-96654
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...
CVE-2026-96654
Plex Media Server versions before 1.43.3.10861 are vulnerable to an improper neutralization of URL values in the 'searchOne' endpoint (CWE-84). This flaw allows an attacker to call functions in other plugins and supply arbitrary parameters, specifically to obtain the owner's admin token. This is ...
CVE-2026-96654 Plex Media Server URL injection
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...
CVE-2026-96654: Improper Neutralization of Encoded URI Schemes in a Web Page
Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters...
PT-2026-97404
Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 1.43.3.10861 Description The software fails to correctly neutralize URL values within the 'searchOne' function. This improper neutralization of encoded URI schemes allows an attacker to call functions from...
com.github.exabrial:graylog-plugin-openwire (>=1.0.0, <=1.2.0), de.hilling.graylog:graylog-plugin-function-multimatch (1.0.1) +4 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.4.6)
org.graylog2:graylog2-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire =1.0.0, =1.2.0 -...
de.hilling.graylog:graylog-plugin-function-multimatch (>=1.1.1, <=1.1.2), org.graylog.plugins:graylog-plugin-parent (2.5.2) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.5.2)
org.graylog2:graylog2-server MAVEN version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.1.1, =1.1.2 -...
de.hilling.graylog:graylog-plugin-function-multimatch (>=1.0.2, <=1.1.0), org.graylog.plugins:graylog-plugin-parent (2.4.0) +3 more potentially affected by CVE-2026-55841 via org.graylog2:graylog2-server (2.4.0)
org.graylog2:graylog2-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.0.2, =1.1.0 -...
WordPress plugin Orderable has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
CVE-2024-54192
An issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted file to the tcpeditdltgetplugin function at src/tcpedit/plugins/dltutils.c...
EUVD-2020-13278
Malware in sbrugna...
WordPress plugin Optimize More! – CSS Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Optimize...
CVE-2025-10690
The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplusimportpackinstallplugin' function in all versions up to, and including, 3.2.2. This makes it possible for unauthenticated attackers...
PT-2025-34189
Name of the Vulnerable Software and Affected Versions: Inspiro theme for WordPress versions prior to 2.1.3 Description: The Inspiro theme for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation in the inspiro install plugin function. This allows...
CVE-2025-8418
CVE-2025-8418 : B Slider – Gutenberg Slider Block for WP (WordPress) is vulnerable up to version 1.1.30 due to missing capability checks on the activated_plugin function. Authenticated users with subscriber-level access or higher can install arbitrary plugins, potentially enabling remote code exe...
de.hilling.graylog:graylog-plugin-function-multimatch (>=1.0.2, <=1.1.0), org.graylog.plugins:graylog-plugin-parent (2.4.0) +3 more potentially affected by CVE-2025-46827 via org.graylog2:graylog2-server (2.4.0)
org.graylog2:graylog2-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.0.2, =1.1.0 -...
com.github.exabrial:graylog-plugin-openwire (>=1.0.0, <=1.2.0), de.hilling.graylog:graylog-plugin-function-multimatch (1.0.1) +4 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.4.6)
org.graylog2:graylog2-server MAVEN version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - com.github.exabrial:graylog-plugin-openwire =1.0.0, =1.2.0 -...
de.hilling.graylog:graylog-plugin-function-multimatch (>=1.0.2, <=1.1.0), org.graylog.plugins:graylog-plugin-parent (2.4.0) +3 more potentially affected by unknown CVE via org.graylog2:graylog2-server (2.4.0)
org.graylog2:graylog2-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.0.2, =1.1.0 -...
CVE-2024-52958 iota C.ai Conversational Platform - Improper Verification of Cryptographic Signature
A improper verification of cryptographic signature vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to load a malicious DLL via upload plugin function...
