1410748 matches found
EUVD-2026-51747
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
EUVD-2026-51712
The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll...
EUVD-2026-51711
The Mapster WP Maps WordPress plugin before 1.24.0 does not perform any authorization or post-status check on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post regardless of its status, including unpublished draft, pending, private, and...
CVE-2026-14214
The Booking for Appointments and Events Calendar WordPress plugin is vulnerable before version 2.4.4: the customer import does not restrict which fields can be written, enabling a user with the Amelia Manager role to modify arbitrary columns of any stored user record via the import request. This ...
EUVD-2026-51705
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the Amelia Manager role to modify arbitrary columns of any stored user record by supplying them in the import request...
EUVD-2026-51708
The Authora : Easy login with mobile number WordPress plugin before 1.7.7 does not keep its one-time login code confidential, returning the code and a valid verification token in the response of an unauthenticated action, allowing unauthenticated attackers to log in as any user whose registered...
EUVD-2026-51703
The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request CSRF when a logged-in administrator is tricked into...
CVE-2026-10827
The CVE-2026-10827 affects the Spectra Legacy WordPress plugin prior to version 2.20.0. It does not validate or escape several block style attributes when generating the CSS for a block, enabling users with the Contributor role and above to inject arbitrary CSS into pages that render the affected...
ROOT-OS-UBUNTU-2204-CVE-2026-53001 CVE-2026-53001 in rootio-linux - Patched by Root
Root has patched CVE-2026-53001 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38147 CVE-2025-38147 in rootio-linux - Patched by Root
Root has patched CVE-2025-38147 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40064 CVE-2025-40064 in rootio-linux - Patched by Root
Root has patched CVE-2025-40064 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-43198 CVE-2026-43198 in rootio-linux - Patched by Root
Root has patched CVE-2026-43198 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40155 CVE-2025-40155 in rootio-linux - Patched by Root
Root has patched CVE-2025-40155 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-53025 CVE-2026-53025 in rootio-linux - Patched by Root
Root has patched CVE-2026-53025 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-39713 CVE-2025-39713 in rootio-linux - Patched by Root
Root has patched CVE-2025-39713 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68240 CVE-2025-68240 in rootio-linux - Patched by Root
Root has patched CVE-2025-68240 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38576 CVE-2025-38576 in rootio-linux - Patched by Root
Root has patched CVE-2025-38576 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-38517 CVE-2025-38517 in rootio-linux - Patched by Root
Root has patched CVE-2025-38517 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...