24882 matches found
CVE-2016-1182
creationtimestamp| type| source ---|---|--- 2026-02-11 12:49:28+00:00| seen| https://gist.github.com/kitherill/35c9211065676c6c258f3a3f1d76a26d...
CVE-2025-15400
The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...
CVE-2025-15400 OpenPix <= 2.13.3 - Subscriber+ Payment Gateway Settings Reset
The OpenPix for WooCommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook...
CVE-2025-15400
CVE-2025-15400 concerns the WordPress plugin OpenPix for WooCommerce (
CVE-2025-70045
creationtimestamp| type| source ---|---|--- 2026-02-11 02:54:39+00:00| seen| https://gist.github.com/zcxlighthouse/bd5852a409c97438016f2c476f8461d9 2026-02-23 23:13:09+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mfkrozwk2k2l...
PT-2026-7486
The Pix para Woocommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. This permits any authenticated users, such as subscribers to clear API credentials and webhook status...
PT-2026-7672
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the use...
GHSA-Q455-M56C-85MH
creationtimestamp| type| source ---|---|--- 2026-02-10 19:10:06+00:00| seen| https://gist.github.com/alon710/c533b0ed39b2dd99fa8ad47f72c7f847...
CVE-2026-26003
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...
CVE-2026-26003
CVE-2026-26003 affects FastGPT versions 4.14.0–4.14.5, where an unauthenticated attacker can access the plugin system via FastGPT/api/plugin/xxx, potentially crashing the plugin system and causing loss of plugin installation status. The impact on confidentiality/integrity is limited, with availab...
CVE-2026-26003 FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...
CVE-2026-26003 FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...
CVE-2026-26003 FastGPT Plugin forwarding request is not authenticated, posing a serious risk of attack
FastGPT is an AI Agent building platform. From 4.14.0 to 4.14.5, attackers can directly access the plugin system through FastGPT/api/plugin/xxx without authentication, thereby threatening the plugin system. This may cause the plugin system to crash and the loss of plugin installation status, but ...
CVE-2026-21511
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:11:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0058 2026-02-11 10:00:44+00:00| seen|...
CVE-2026-21525
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:53:06+00:00| seen|...
CVE-2026-21533
creationtimestamp| type| source ---|---|--- 2026-02-10 17:30:28+00:00| seen| https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review 2026-02-10 18:01:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053 2026-02-10 18:36:00+00:00| seen|...
GHSA-HXW8-4H9J-HQ2R
creationtimestamp| type| source ---|---|--- 2026-02-10 07:40:05+00:00| seen| https://gist.github.com/alon710/39fd68ea5d11f2bf18c6fe6acdd0ee1d...
GHSA-4255-C27H-62M5
creationtimestamp| type| source ---|---|--- 2026-02-10 05:40:05+00:00| seen| https://gist.github.com/alon710/5db565d21892e24ae6ebdfecaa349708...
GHSA-8GRV-JQ2G-CFHW
creationtimestamp| type| source ---|---|--- 2026-02-10 05:10:05+00:00| seen| https://gist.github.com/alon710/041178d8a553aa39851ef0441a5d85f3...
CVE-2026-0488
creationtimestamp| type| source ---|---|--- 2026-02-10 04:22:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mei4hmbz4n25 2026-02-10 06:00:43+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meibww5ntu2b 2026-02-10 06:00:52+00:00| seen|...