130340 matches found
CVE-2026-14333
The CVE concerns the Demi WordPress plugin, affected up to version 0.0.6. It stores full-site backup archives in a publicly accessible location with a predictable filename, exposing them to unauthenticated access. The impact is severe: attackers can download complete site backups, including the d...
CVE-2026-14319
The CVE relates to the GiveWP WordPress plugin (versions before 4.16.3) where a REST API endpoint does not properly restrict access, allowing unauthenticated retrieval of recurring-donor information. Affected component: the REST API endpoint handling recurring-donation records. Root cause: insuff...
CVE-2026-14317
CVE-2026-14317 affects the GiveWP WordPress plugin prior to version 4.16.3. The vulnerability arises because the plugin does not properly restrict the set of payment gateways to those enabled by the administrator, and it derives this list in part from request input. As a result, unauthenticated u...
CVE-2026-14483
The CVE-2026-14483 entry describes an unauthenticated Arbitrary File Upload in the Realtyna Organic IDX plugin + WPL Real Estate (
CVE-2026-56671
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
EUVD-2026-51401
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, getmodelpreview in app/modelmanager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing an unauthenticated remote attacker to us...
CVE-2026-43832
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832
Full details and mitigation steps are currently restricted and will be published at a later date...
EUVD-2026-51389
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832
Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the Cookie parsing methods to conduct code execution when the SafeEnhancement feature is enabled...
CVE-2026-43831 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
Full details and mitigation steps are currently restricted and will be published at a later date...
EUVD-2026-51387
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the log message functionality to conduct code execution...
CVE-2026-43829 tbc
Full details and mitigation steps are currently restricted and will be published at a later date...