21731 matches found
MINI-C5JP-P6VR-762W
Bulletin has no description...
MINI-FMPX-3R9F-CX58
Bulletin has no description...
MINI-HQC2-GQH4-M25C
Bulletin has no description...
MINI-H44M-8G6C-PGGM
Bulletin has no description...
MINI-FXH9-24C8-RHM5
Bulletin has no description...
MINI-R974-C7F6-5C7Q
Bulletin has no description...
MINI-JCQX-MFPP-G549
Bulletin has no description...
MINI-4X89-WPGV-QCVV
Bulletin has no description...
MINI-QVFR-7G79-9GF7
Bulletin has no description...
MINI-4228-J85G-5RH6
Bulletin has no description...
MINI-V3F3-WRVG-C3WG
Bulletin has no description...
MINI-F49J-M3C2-CRPW
Bulletin has no description...
MINI-C9HM-RJGF-57GW
Bulletin has no description...
MINI-M2VG-H5M9-CRPX
Bulletin has no description...
MINI-WJP9-W83C-W2V9
Bulletin has no description...
MINI-X727-MVW3-743F
Bulletin has no description...
CVE-2026-8611
The Klamra Paycal for Aspaclaria WordPress plugin is vulnerable to Insecure Direct Object Reference through the invoice_id parameter in versions up to 1.1.4, caused by missing validation on a user-controlled key. Authenticated users with subscriber-level access and higher can enumerate post IDs t...
CVE-2026-8611 Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoiceid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
EUVD-2026-34958
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoiceid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
PT-2026-47141
The Klamra Paycal for Aspaclaria plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.4 via the 'invoice id' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...