23255 matches found
CVE-2026-77003
creationtimestamp| type| source ---|---|--- 2026-08-23 21:39:40+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtrqujhhvs2k...
CVE-2026-78183
creationtimestamp| type| source ---|---|--- 2026-08-23 20:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oxdo3eesu6f4 2026-08-23 20:39:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6rdunbaghb54q...
CVE-2026-75922
creationtimestamp| type| source ---|---|--- 2026-08-23 18:54:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2qowb4i2bolr 2026-08-23 20:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli...
CVE-2026-66917
creationtimestamp| type| source ---|---|--- 2026-08-23 17:00:03+00:00| seen| https://t.me/GithubRedTeam/99370 2026-08-24 00:00:07+00:00| seen| https://t.me/GithubRedTeam/99370...
CVE-2026-7808
creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyueefk223 2026-08-23 15:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2l6kg4p2m 2026-08-23 16:07:19+00:00| seen|...
CVE-2026-5388
creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyucsev325 2026-08-23 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mhxlsl27 2026-08-23 15:32:16+00:00| seen|...
CVE-2026-14853 WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization
The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products...
CVE-2026-14853
WooCommerce Bookings (WordPress plugin) versions before 3.9.0 contain an authorization flaw: one of its AJAX actions lacks a capability check , and the associated nonce check can be bypassed by simply omitting the token. This allows any authenticated user with Subscriber-level access or above to ...
Sharp Multifunction Printers - Directory Listing
It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...
WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting
The Product Addons & Fields for WooCommerce WordPress plugin before version 32.0.7 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape some URL parameters in the admin panel, which could allow attackers to execute arbitrary JavaScript code in ...
CodeChecker <= 6.24.1 - Authentication Bypass
Authentication bypass occurs when the API URL ends with Authentication, Configuration or ServerInfo. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others. id: CVE-2024-10081 info:...
WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE
Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4. id: CVE-2026-49777 info: name: WordPress Product Slider Pro f...
WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting
WordPress eCommerce Product Catalog plugin before 3.0.39 contains a cross-site scripting vulnerability. The plugin does not escape the ic-settings-search parameter before outputting it back in the page in an attribute. This can allow an attacker to steal cookie-based authentication credentials an...
WCAPF WooCommerce Ajax Product Filter - SQL Injection
WCAPF WooCommerce Ajax Product Filter = 4.2.3 contains a time-based SQL injection caused by insufficient escaping of the 'post-author' parameter, letting unauthenticated attackers extract sensitive database information remotely. id: CVE-2026-3396 info: name: WCAPF WooCommerce Ajax Product Filter ...
DomainMOD 4.13.0 - Cross-Site Scripting
DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter. id: CVE-2020-20988 info: name: DomainMOD 4.13.0 - Cross-Site Scripting author: arafatansari severity: medium description: | DomainMOD 4.13.0 is vulnerable to...
MyStyle Custom Product Designer <= 3.21.1 - SQL Injection
The MyStyle Custom Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.21.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...
Oracle iPlanet Web Server 7.0.x - Image Injection
Oracle iPlanet Web Server 7.0.x allows image injection in the Administration console via the productNameSrc parameter to an admingui URI. This issue exists because of an incomplete fix for CVE-2012-0516. id: CVE-2020-9314 info: name: Oracle iPlanet Web Server 7.0.x - Image Injection author:...
Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update
YIKES Inc. Custom Product Tabs for WooCommerce plugin \u003C= 1.7.7 contains a broken access control caused by improper permission checks in &yikes-the-content-toggle option update, letting attackers modify content without authorization. id: CVE-2022-28666 info: name: Custom Product Tabs for...