91064 matches found
CVE-2026-32465: Deserialization of Untrusted Data
Customer PHP Object Injection in Essential Real Estate = 5.3.3 versions...
CVE-2026-15585: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal. This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 befo...
CVE-2026-28192: Unrestricted Upload of File with Dangerous Type
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...
CVE-2026-73397: Deserialization of Untrusted Data
Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...
CVE-2026-28568: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Quill Forms = 5.7.1 versions...
CVE-2026-32333: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Mayosis Core = 5.4.7 versions...
CVE-2026-74004: Missing Authorization
Subscriber Broken Access Control in Gravity Booster – Styles & Layouts for Gravity Forms = 6.0 versions...
CVE-2026-73395: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in Booking calendar, Appointment Booking System = 3.2.36 versions...
CVE-2026-73381: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
CVE-2026-66679: Improper Validation of Specified Quantity in Input
Unauthenticated Broken Access Control in Appointment Hour Booking = 1.5.91 versions...
CVE-2026-66622: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Depicter Slider = 4.8.0 versions...
CVE-2026-73378: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
CVE-2026-66667: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Templately = 3.7.1 versions...
CVE-2026-32463: Unrestricted Upload of File with Dangerous Type
Contributor Arbitrary File Upload in Sync Post With Other Site = 1.9.3 versions...
CVE-2026-73339: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
CVE-2026-73362: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
CVE-2026-66641: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Video Conferencing with Zoom = 4.6.8 versions...
CVE-2026-5224: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information vulnerability in Kriptok Crypto and Information Technologies Industry Trade Inc. Cryptosim allows Retrieve Embedded Sensitive Data. This issue affects Cryptosim: before 3.1.0.229...
CVE-2026-75626: Improper Neutralization of Input During Web Page Generation
SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute scripts in the operator's browser when the correlations view is...