26207 matches found
CVE-2026-86449 LearnPress < 4.4.7 - Unauthenticated Unpublished Course Disclosure via REST API
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities before applying a user supplied post status filter in one of its REST routes, allowing unauthenticated attackers to list courses that are not published, including draft, pending, private, scheduled and trashed one...
CVE-2026-86449
The LearnPress WordPress plugin (versions 4.2.7.1-4.4.6 ) is vulnerable to an unauthenticated information disclosure flaw. The root cause is a failure to verify user capabilities before applying a user-supplied post status filter within one of its REST routes . This allows unauthenticated attacke...
CVE-2026-84907
The Eventin WordPress plugin (versions 4.1.5-4.1.23 ) contains an authentication bypass vulnerability. When the offline (local) payment method is enabled, the plugin fails to properly authorize order finalization because it relies on a nonce exposed to unauthenticated visitors and does not verify...
CVE-2026-84907 Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint
The Eventin WordPress plugin before 4.1.24 does not properly authorise order finalisation when its offline local payment method is enabled, relying on a nonce that is exposed to unauthenticated visitors and never checking that the caller owns the order, allowing unauthenticated attackers to reset...
WordPress Eventin plugin 4.1.5-4.1.23 - Unauthenticated Order and Attendee Status Reset vulnerability
Unauthenticated Order and Attendee Status Reset vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin WP Event Solution versions 4.1.5-4.1.23...
CVE-2026-82125 Schema & Structured Data for WP & AMP 1.46 - 1.65 - Unauthenticated Non-Public Comment Content Disclosure via IDOR
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...
EUVD-2026-80188
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...
CVE-2026-83269
creationtimestamp| type| source ---|---|--- 2026-09-16 02:12:48+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2u3nuct2t 2026-09-16 04:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmatwdqw42f 2026-09-16 16:00:43+00:00| seen|...
PT-2026-93353
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device...
PT-2026-93596
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the s390/vfio-ap component during queue probe. When the vfio ap mdev probe queue function creates the sysfs attribute group, the driver data for the...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38561)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setUPnPCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST reque...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38415)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability in access control. This vulnerability stems from an improper access control in the getCloudDownloadStatus function. Attackers can exploit this vulnerability by sending a specially crafted POS...
PT-2026-93754
Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.27 BIND 9 versions 9.21.0 through 9.21.25 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.27-S1 Description A malformed zone...
CVE-2026-27559: Improper Neutralization of Special Elements used in an OS Command
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device...
CVE-2026-27560: Improper Neutralization of Special Elements used in an OS Command
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device...
CVE-2026-76439: Missing Authentication for Critical Function
A vulnerability in the endpoint posture status reporting functionality of the guest portal web application of Cisco ISE could allow an unauthenticated, remote attacker to submit forged posture status events into the endpoint posture pipeline. This vulnerability is due to insufficient authenticati...
PT-2026-93490
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx driver where the qla2x00 status entry function fails to properly validate SCSI Request Blocks SRB before they enter the SCSI fast path. The function filter...
CVE-2026-82125: Authorization Bypass Through User-Controlled Key
The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...
PT-2026-93352
A low-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted GET request with user credentials allowing execution of commands with root privileges on the device...