91349 matches found
CVE-2024-6832: Protection Mechanism Failure
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2026-32469: Authentication Bypass by Spoofing
Unauthenticated Bypass Vulnerability in CAPTCHA 4WP = 7.6.0 versions...
CVE-2026-66695: Path Traversal: '.../...//'
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
CVE-2026-15599: Unverified Ownership
Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5...
CVE-2026-61963: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...
CVE-2026-66709: Improper Control of Generation of Code
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
CVE-2026-66663: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66705: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-28179: Improper Neutralization of Input During Web Page Generation
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-65574: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-66683: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...
CVE-2026-3415: Improper Restriction of Recursive Entity References in DTDs
The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under certain conditions, the XML parser allows the resolution of external entities when handling user-supplied XML content during validation operations. This behavior...
CVE-2024-8995: Insufficient Session Expiration
Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system. This allows for the persistence of these codes, enabling them to be potentially reused. If an attacker possesses both the authorization code and the associated client credentials clie...
CVE-2026-28082: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in JetEngine = 3.8.13.1 versions...
CVE-2026-28005: Missing Authorization
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...
CVE-2026-66712: Missing Authorization
Unauthenticated Broken Access Control in Simple Membership = 4.7.8 versions...
CVE-2026-66708: Missing Authorization
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
CVE-2026-66707: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...