Lucene search
+L

232043 matches found

Cvelist
Cvelist
added 2026/08/03 6:0 a.m.50 views

CVE-2026-16534 Import and export users and customers < 2.4.2 - Custom Role Privilege Escalation to Administrator via CSV Import

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing...

0.00232EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/03 6:0 a.m.10 views

CVE-2026-16276

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers...

5.5AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/03 6:0 a.m.7 views

EUVD-2026-52163

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...

5.3AI score0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/03 6:0 a.m.50 views

CVE-2026-16057 Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other...

0.00232EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/03 6:0 a.m.48 views

CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

0.00262EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/03 6:0 a.m.8 views

EUVD-2026-52162

The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete arbitrary posts, pages, and other...

5.6AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/03 6:0 a.m.8 views

EUVD-2026-52165

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks...

9.1CVSS5.7AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 6:0 a.m.40 views

CVE-2026-16532

The CVE-2026-16532 affects the Link Library WordPress plugin prior to version 7.9.3. The defect stems from improper sanitisation/escaping of a user-supplied value used in a SQL query, enabling unauthenticated SQL injection via the front-end link submission form. Impact is unauthenticated access w...

9.1CVSS5.7AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 6:0 a.m.34 views

CVE-2026-16274

CVE-2026-16274 affects the Classified Listing WordPress plugin (versions before 5.4.4). A missing capability/ownership check on an AJAX action that returns a post’s content allows users with contributor-level access and above to read the content of any post, page, or custom post type, including d...

2.7CVSS5.3AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/03 6:0 a.m.6 views

EUVD-2026-52164

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers...

5.5AI score0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/03 6:0 a.m.46 views

CVE-2026-16276 Classified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_search

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers...

0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/03 6:0 a.m.51 views

CVE-2026-16274 Classified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_posts

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...

0.00179EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 6:0 a.m.34 views

CVE-2026-15254

The issue affects the Simply Schedule Appointments WordPress plugin prior to version 1.6.12.11. A missing capability check on an administrative appointment-listing shortcode, combined with per-user result scoping that fails open, allows users with the Contributor role and above to disclose all cu...

6.5CVSS5.4AI score0.00201EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 6:0 a.m.37 views

CVE-2026-16057

The CVE affects the Contest Gallery WordPress plugin prior to version 30.0.7. One post-deletion handler omits per-object capability checks and nonce validation, gating the action only by a coarse role-membership test. This allows any user with Author-level or higher privileges to permanently dele...

6.5CVSS5.6AI score0.00232EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/03 6:0 a.m.8 views

EUVD-2026-52166

The Import and export users and customers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignment and per-user edit permissions during CSV import, allowing a user holding only the user-creation capability to create an administrator account and to overwrite an existing...

9.1CVSS5.5AI score0.00232EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/03 6:0 a.m.33 views

CVE-2026-16276

The CVE concerns the Classified Listing WordPress plugin prior to version 5.4.4. An AJAX action (rtcl_revenue_order_search) does not perform a required capability check, allowing users with contributor-level access and above to read daily store revenue totals that are normally restricted to admin...

2.7CVSS5.5AI score0.00179EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/08/03 4:5 a.m.7 views

CVE-2026-6695

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA Paint Shop Pro Array image file. This vulnerability, a heap-based out-of-bounds write in the decodelzss function of the PAA file format plugin, allows data to be written beyond t...

5.5CVSS6.2AI score0.00152EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/03 4:5 a.m.53 views

CVE-2026-6694 Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...

5.5CVSS0.00149EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/03 4:5 a.m.11 views

CVE-2026-6694

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/03 4:5 a.m.6 views

EUVD-2026-52150

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics APNG image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow CWE-121, causing the file-png plugin to crash and resulting in a...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0References2
Rows per page
Query Builder