Lucene search
+L

239595 matches found

Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.18 views

PT-2026-82654

Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.0.6 Description The Tutor LMS WordPress plugin contains a template injection issue caused by insufficient validation of request data. This allows unauthenticated users to overwrite internal variables during templa...

9.8CVSS6AI score0.01498EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.15 views

PT-2026-82601

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description A signature verification issue exists in the gpg runner.verify detached function. The system accepts revoked and expired keys because it only checks the VALIDSIG status and fails to inspect...

9.8CVSS5.9AI score0.00241EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.18 views

PT-2026-82837

Name of the Vulnerable Software and Affected Versions WPMU DEV Dashboard versions prior to 5.0.2 Description An authentication bypass exists in the Hub Single Sign-On SSO flow, potentially affecting an estimated 350,000 WordPress sites. The issue stems from HMAC canonicalization confusion—a...

9.8CVSS6.6AI score0.00339EPSS
SaveExploits2References21
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.12 views

PT-2026-82448

Name of the Vulnerable Software and Affected Versions Apache APISIX versions 2.12.0 through 3.17.0 Description An inconsistent interpretation of HTTP requests, known as HTTP Request/Response Smuggling, occurs on serverless-plugin routes. This allows an attacker to manipulate the request stream so...

7.5CVSS5.9AI score0.00622EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
added 2026/08/27 12:00 a.m.45 views

VulnCheck KEV: CVE-2026-76581

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated wdpssostep1 and wdpssostep2 AJAX actions, where step 1 signs and disclose...

9.8CVSS5.8AI score0.00339EPSS
SaveIn wildExploits2References3
Kitploit
Kitploit
added 2026/08/26 11:19 p.m.11 views

CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC-

CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC- Questo repository contiene una Proof of Concept in lavorazione per CVE-2025-22777 che interessa il plugin GiveWP per WordPress. Le cose potrebbero cambiare, rompersi o migliorare nel tempo. Per prima cosa, clona questo repository. Sul t...

9.8CVSS8.7AI score0.00936EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2026/08/26 9:08 p.m.14 views

TCGuard

TCGuard — Universal Crash, Exploit, Packet & Anti-Bot Protecti...

10CVSS7.7AI score0.99999EPSS
SaveExploits370
Chainguard
Chainguard
added 2026/08/26 8:23 p.m.16 views

GO-2026-6259 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws, velero-plugin-for-gcp-fips, velero-plugin-for-gcp, velero-plugin-for-aws-fips...

5.8AI score
SaveExploits0
Wolfi
Wolfi
added 2026/08/26 8:22 p.m.14 views

GO-2026-6259 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-microsoft-azure, velero-plugin-for-aws...

5.9AI score
SaveExploits0
Patchstack
Patchstack
added 2026/08/26 5:47 p.m.6 views

WordPress Push Notification for Post and BuddyPress plugin <= 3.20 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by JunHee CHO in WordPress Plugin Push Notification for Post and BuddyPress versions = 3.20...

5.4CVSS5.3AI score0.0022EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:46 p.m.5 views

WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability

Settings Change vulnerability discovered by mad4cyber in WordPress Plugin Post SMTP versions 4.0.0-beta.1...

5.4CVSS5.3AI score0.0017EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:39 p.m.6 views

WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Suggestion Engine for WooCommerce versions = 2.0.11...

8.5CVSS6AI score0.00342EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:38 p.m.7 views

WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Kali Forms versions = 2.4.23...

5.3CVSS5.3AI score0.00282EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:37 p.m.8 views

WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions = 2.2.4...

8.1CVSS5.3AI score0.00174EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:37 p.m.7 views

WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Ditty versions = 3.1.67...

5.3CVSS5.3AI score0.00282EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:35 p.m.6 views

WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin GeoDirectory versions = 2.8.176...

8.8CVSS5.3AI score0.00184EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/08/26 5:35 p.m.7 views

WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentPlayer Pro versions = 1.3.2...

4.9CVSS5.3AI score0.00309EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2026/08/26 5:12 p.m.9 views

SUSE CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

4.4CVSS5.9AI score0.0023EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/26 4:16 p.m.12 views

CVE-2026-54606

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the SunEditor Embed plugin in src/plugins/modal/embed.js parses attacker-controlled raw embed HTML with DOMParser and processes the resulting DOM nodes. When an external script eleme...

8.5CVSS0.00354EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/26 3:26 p.m.9 views

GHSA-W93Q-CQ9W-58P7 SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed

Summary A DOM-based Cross-Site Scripting XSS vulnerability exists in the SunEditor Embed plugin. Crafted iframe embed HTML followed by an external element bypasses the plugin’s sanitization logic. The plugin recreates and appends the attacker-controlled script element to the live DOM, causing...

8.5CVSS6.2AI score0.00354EPSS
SaveExploits0References5
Rows per page
Query Builder