507 matches found
phpLDAPadmin <= 1.2.3 - Reflected XSS
phpLDAPadmin = 1.2.3 contains a reflected cross-site scripting caused by unsanitized input in htdocs/entrychooser.php via the form, element, rdn, or container parameter, letting attackers execute malicious scripts in victim browsers, exploit requires sending crafted input. id: CVE-2017-11107 info...
WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Devlin Jenkins in WordPress Plugin TrueBooker versions = 1.2.3...
CVE-2026-81795
Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...
EUVD-2026-75526
Unauthenticated Cross Site Scripting XSS in Page Visits Counter Lite = 1.2.3 versions...
WordPress Page Visits Counter – Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Page Visits Counter Lite versions = 1.2.3...
CVE-2026-50167 Kurrier: Authenticated cross-user authorization bypass in Kurrier API
Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints for listing and retrieving webhook and identity resources did not enforce ownership checks for authenticated API requests. An attacker with a valid API key could use anothe...
CVE-2026-14364
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity before resetting their password...
CVE-2026-14365
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-14364 TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3. This is due to the plugin not properly validating a user's identity before resetting their password...
CLSA-2026-1782954036 TuxCare security update for word-wrap (1 CVE)
TuxCare rebuilt word-wrap to address 1 CVE. Fixed in 1.2.3-tuxcare.1...
CLSA-2026-1774830262 TuxCare security update for loader-utils (3 CVEs)
TuxCare rebuilt loader-utils to address 3 CVEs. Fixed in 1.2.3-tuxcare.1...
PT-2026-67025
The Everest Toolkit WordPress plugin through 1.2.3 does not validate the type of files uploaded during demo-content import the WordPress file-type test is disabled, allowing high-privilege users Administrator by default, including non-super-admin site administrators on multisite to upload...
CLEANSTART-2026-IZ40410 Security fixes in apko 1.2.3-r0
Package apko version 1.2.3-r0 fixes 1 vulnerabilities: ghsa-3xc5-wrhm-f963...
CVE-2026-61950
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61951
The CVE covers WordPress TrueBooker plugin <= 1.2.3 with unauthenticated privilege escalation. Public details in the connected documents confirm: affected product/component = TrueBooker WordPress plugin; vulnerability type = privilege escalation; root cause/technical specifics are not describe...
CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61951 WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions...
EUVD-2026-48208
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...