90997 matches found
CVE-2026-78267: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in TranslatePress = 3.3.2 versions...
CVE-2026-32561: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-32554: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...
CVE-2026-66671: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-28165: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Digits = 9.2 versions...
FreeBSD : traefik -- Multiple vulnerabilities (b22fee3d-9f14-11f1-b948-5404a68ad561)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b22fee3d-9f14-11f1-b948-5404a68ad561 advisory. The traefik project releases a new version addressing multiple vulnerabilities: Tenable has extracted t...
CVE-2026-78315: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78264: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Toolset Blocks = 1.6.26 versions...
WPProbe Plugin Enumeration Tool 0.12.9
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
CVE-2026-78280: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Hash Form = 1.4.0 versions...
CVE-2026-78279: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78291: Missing Authorization
Unauthenticated Broken Access Control in RepairBuddy = 4.1223 versions...
CVE-2026-78277: Server-Side Request Forgery (SSRF)
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
CVE-2026-66670: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-66585: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-28190: Missing Authorization
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2025-26237: Improper Neutralization of Special Elements used in a Command
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2026-78212: Relative Path Traversal
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...