Lucene search
+L

239750 matches found

Patchstack
Patchstack
added 2026/08/27 12:21 p.m.6 views

WordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Md Mehedi Hasan in WordPress Plugin WP Job Portal versions = 2.5.9...

4.3CVSS5.3AI score0.002EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/27 12:17 p.m.5 views

WordPress RestrictMate plugin < 1.3.0 - Unauthenticated Privilege Escalation to Administrator vulnerability

Unauthenticated Privilege Escalation to Administrator vulnerability discovered by João Ramos Maciel in WordPress Plugin RestrictMate versions 1.3.0...

9.8CVSS5.3AI score0.00299EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 11:43 a.m.6 views

WordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ACF Extended versions = 0.9.2.6...

4.3CVSS5.3AI score0.00152EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/27 11:12 a.m.8 views

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Daniel Dhaniswara in WordPress Plugin Salon booking system versions = 10.31.1...

4.8CVSS5.9AI score0.00171EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 11:11 a.m.5 views

WordPress Salon booking system plugin <= 10.31.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Salon booking system versions = 10.31.1...

4.3CVSS5.9AI score0.00162EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 11:07 a.m.5 views

WordPress CubeWP plugin <= 1.1.31 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin CubeWP versions = 1.1.31...

4.9CVSS5.9AI score0.00222EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/27 10:16 a.m.12 views

CVE-2026-81279

Subscriber Broken Access Control in Push Notification for Post and BuddyPress = 3.20 versions...

5.4CVSS0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.14 views

CVE-2026-78288

Unauthenticated SQL Injection in Beautiful Taxonomy Filters = 2.4.6 versions...

9.3CVSS0.00383EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.16 views

CVE-2026-78293

Unauthenticated Cross Site Scripting XSS in WP w3all phpBB = 3.0.6 versions...

7.1CVSS0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.14 views

CVE-2026-78261

Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...

7.1CVSS0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.13 views

CVE-2026-78273

Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...

6.5CVSS0.00211EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.12 views

CVE-2026-78283

Unauthenticated Cross Site Scripting XSS in Music Player for WooCommerce = 1.8.9 versions...

7.1CVSS0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.14 views

CVE-2026-74848

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

7.5CVSS0.00622EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/27 10:16 a.m.9 views

CVE-2026-32564

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

8.5CVSS0.00342EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 10:16 a.m.8 views

CVE-2026-32566

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

9.8CVSS0.0045EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 9:16 a.m.11 views

EUVD-2026-66958

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' vulnerability in Apache APISIX. An attacker could make other clients receive attacker-chosen or other users' responses on serverless-plugin routes. This issue affects Apache APISIX: from 2.12.0 through 3.17.0. Users ar...

7CVSS5.3AI score0.00622EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/27 9:14 a.m.35 views

CVE-2026-75020 Apache APISIX: ldap-auth plugin cross-subtree identity impersonation

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in Apache APISIX. A caller who holds valid credentials for one entry in the LDAP directory can authenticate through APISIX as a consumer mapped to a different entry, one the plugin's configured scope...

7CVSS0.00542EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 9:14 a.m.43 views

CVE-2026-75020

This LDAP Injection vulnerability in Apache APISIX's ldap-auth plugin (versions 2.11.0 through 3.17.0 ) allows a caller holding valid credentials for one LDAP directory entry to authenticate as a consumer mapped to a different entry, effectively bypassing the plugin's configured scope and enablin...

8.1CVSS5.4AI score0.00542EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/08/27 9:00 a.m.22 views

CVE-2026-81276

CVE-2026-81276 affects the Kali Forms WordPress plugin in versions 2.4.23 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, rated CVSS 5.3 (Medium) with an attack vector of network, low complexity, no required privileges, and a low impact on integrity. The issue wa...

5.3CVSS5.1AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 9:00 a.m.32 views

CVE-2026-81274

The WordPress Ditty (News Ticker) plugin (versions

5.3CVSS5.1AI score0.00282EPSS
SaveExploits0References1
Rows per page
Query Builder