295318 matches found
CVE-2026-123842
JetBrains IntelliJ IDEA versions prior to 2026.3 are vulnerable to an arbitrary file write vulnerability. The root cause is improper link resolution during the extraction of plugin archives , where symlinks can be leveraged to overwrite files. The security impact is categorized as HIGH for integr...
CVE-2026-123842
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives...
EUVD-2026-118345
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives...
WordPress Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin <= 4.2.18 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Mohamed Amgad Khater mamgad in WordPress Plugin Optimole versions = 4.2.18...
HackBar
HackBar Burpsuite Plugin Usage Requirements Burpsuite How to Install Download Latest Jar from https://github.com/d3vilbug/HackBar/releases/ and add in burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS Upcoming Features/Modules Ctrl + H shortcut WAF bypass SQLi Decoder/Encoder Greets...
WordPress Stop Spammers Classic plugin <= 2026.6 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Mohamed Amgad Khater mamgad in WordPress Plugin Stop Spammers versions = 2026.6...
WordPress Motors – Car Dealership & Classified Listings Plugin plugin <= 1.4.128 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by churchill11 in WordPress Plugin Motors versions = 1.4.128...
CVE-2026-123486
WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...
EUVD-2026-118286
WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...
CVE-2021-34646
CVE-2021-34646 PoC for CVE-2021-34646 Exploit Title: WordPress Plugin WooCommerce Booster Plugin 5.4.3 - Authentication Bypass Date: 2021-09-16 Exploit Author: Sebastian Kriesten 0xB455 Contact: https://twitter.com/0xB455 Affected Plugin: Booster for WooCommerce Plugin Slug: woocommerce-jetpack...
ghidra-copilot
Ghidra Copilot AI-assisted companion for Ghidra. It embeds a chat panel that can answer questions about your current program, suggest next steps, and run small analysis tools directly from the conversation. What It Does Chat inside Ghidra that stays in context with the open program. Tool calls fo...
CVE-2026-123325
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...
CVE-2026-123325
JetBrains YouTrack versions before 2025.3.170763 , 2026.1.14150 , and 2026.2.19656 are vulnerable to an inclusion of untrusted remote code vulnerability. This issue occurs via the plugin sandbox page , where the inclusion of functionality from an untrusted control sphere (CWE-829) is possible. Th...
EUVD-2026-118089
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...
CVE-2026-123325
In JetBrains YouTrack before 2025.3.170763, 2026.1.14150, 2026.2.19656 inclusion of untrusted remote code was possible via the plugin sandbox page...
WordPress MCB plugin <= 1.0.0 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin MCB versions = 1.0.0...
CVE-2026-121636
The Quick Event Manager WordPress plugin (versions 9.9.5 through 9.18) contains a vulnerability where it fails to verify the authenticity of PayPal payment notifications . This flaw is triggered via the 'debug' parameter , allowing unauthenticated attackers to bypass IPN verification and mark eve...
CVE-2026-121636 Quick Event Manager 9.9.5 - 9.18 - Unauthenticated PayPal IPN Verification Bypass via the 'debug' Parameter
The Quick Event Manager WordPress plugin before 9.19 does not verify the authenticity of PayPal payment notifications before marking event registrations as paid, which could allow unauthenticated attackers to mark registrations as paid without making a payment...
EUVD-2026-117973
The Order Tracking WordPress plugin before 3.6.0 does not verify that a PayPal payment notification was sent to the merchant's account, or that its amount matches the order total, before marking an order as paid, which could allow unauthenticated attackers to mark arbitrary orders as paid using a...
WordPress Order Tracking plugin < 3.6.0 - Unauthenticated Payment Confirmation Forgery vulnerability
Unauthenticated Payment Confirmation Forgery vulnerability discovered by Vũ Quang Huy in WordPress Plugin Order Tracking versions 3.6.0...