23280 matches found
WordPress Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin <= 2.11.4 - Authenticated (Contributor+) Account Takeover vulnerability
Authenticated Contributor+ Account Takeover vulnerability discovered by tiborisaak in WordPress Plugin Ultimate Member versions = 2.11.4...
CVE-2026-44271
creationtimestamp| type| source ---|---|--- 2026-06-22 23:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzkayykd2f 2026-06-23 14:04:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moxkylwnok27 2026-07-23 01:07:06+00:00| seen|...
CVE-2026-0126
creationtimestamp| type| source ---|---|--- 2026-06-22 23:16:45+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movzezi5jz2s 2026-06-29 19:58:01+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mphbk4owkd2w 2026-07-09 13:05:02+00:00| seen|...
EUVD-2026-38346
IBM i 7.6, 7.5, 7.4, and 7.3, IBM WebSphere Application Server, and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server...
CVE-2026-48867
creationtimestamp| type| source ---|---|--- 2026-06-22 19:18:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3movm2czvz423...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2025-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE e...
CVE-2026-34892
creationtimestamp| type| source ---|---|--- 2026-06-22 18:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3movilhjgc22d...
CVE-2026-8074
creationtimestamp| type| source ---|---|--- 2026-06-22 16:48:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movdpagmtf22...
CVE-2026-6653
creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3movco6cnwk26 2026-07-08 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533bbiim2i 2026-07-10 12:01:08+00:00| seen|...
CVE-2026-6673
creationtimestamp| type| source ---|---|--- 2026-06-22 16:23:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movcci4nxt2g...
CVE-2026-11943
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-9162
creationtimestamp| type| source ---|---|--- 2026-06-22 16:15:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbu35xhn2t...
CVE-2026-12888
creationtimestamp| type| source ---|---|--- 2026-06-22 16:09:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movbipzlbt22...
CVE-2026-56450
creationtimestamp| type| source ---|---|--- 2026-06-22 15:59:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movaxeespo2t...
EUVD-2026-38270
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-11943
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...
CVE-2026-11943
CVE-2026-11943 affects Akaunting 3.1.21 and is an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name, which can be reflected in the UI. The CVSS4 vector ...