28939 matches found
CVE-2026-14847 Paid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOR
The Paid Membership Subscriptions WordPress plugin before 3.0.7 does not perform capability or nonce checks on one of its payment-related AJAX actions, allowing any authenticated user with Subscriber-level access and above to disclose the payment details of any member by enumerating the payment...
CVE-2026-14843
The Events Made Easy WordPress plugin versions before 3.1.4 is vulnerable to an Insecure Direct Object Reference (IDOR) . The plugin fails to verify if a requester is authorized to modify a targeted record when processing unauthenticated data-change requests. Because the system relies solely on a...
CVE-2026-14847
The Paid Membership Subscriptions WordPress plugin (versions before 3.0.7 ) is vulnerable to a payment data disclosure flaw. The root cause is a failure to perform capability or nonce checks on a specific payment-related AJAX action, leading to an IDOR (Insecure Direct Object Reference) vulnerabi...
CVE-2026-63563
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:35+00:00| seen| https://jvn.jp/en/vu/JVNVU98759887 2026-07-31 22:00:02+00:00| seen| Telegram/lzREupovl051IH-OQxANl3xWT1ZBkl1PTRgXqKJ4p6mKnoQ 2026-08-01 00:00:11+00:00| published-proof-of-concept|...
MINI-HQMX-583X-XQ9F
Bulletin has no description...
SUSE CVE-2025-64431
Zitadel is an open source identity management platform. Versions 4.0.0-rc.1 through 4.6.2 are vulnerable to secure Direct Object Reference IDOR attacks through its V2Beta API, allowing authenticated users with specific administrator roles within one organization to access and modify data belongin...
SUSE CVE-2025-64523
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...
PT-2026-66833
Name of the Vulnerable Software and Affected Versions NTPsec affected versions not specified Description A buffer overflow occurs in the Zyfer refclock component of NTPsec. This issue allows a local attacker to cause a crash of the ntpd process by triggering a buffer copy without checking the siz...
PT-2026-66743
Name of the Vulnerable Software and Affected Versions Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder versions prior to 6.2.9 Description An Insecure Direct Object Reference exists due to missing validation on a user-controlled key. Unauthenticated attackers...
CVE-2026-17567: Authorization Bypass Through User-Controlled Key
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter due to missing validation on a user controlled key. This...
PT-2026-66996
Name of the Vulnerable Software and Affected Versions WooCommerce PayPal Payments versions prior to 3.3.3 Description An Insecure Direct Object Reference IDOR exists in the enqueue paypal insights script on order received function due to missing validation on a user-controlled key. This allows...
JDBC driver Heap Buffer Overflow DoS
The vulnerability of the userOverridesAsString method in the JDBC driver handling library in c3p0 is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created Java serializable objects and instances of...
Linux RxRPC Buffer Overflow DoS
The vulnerability of the rxrpcdestroycall function in the net/rxrpc/callobject.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-17948
A type confusion flaw was found in the V8 component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516849257...
ECHO-C482-78FF-7870
Bulletin has no description...
ECHO-3C57-8009-218D
Bulletin has no description...
ECHO-964A-7743-23A9
Bulletin has no description...
