Lucene search
+L

8483 matches found

OSV
OSV
added 2026/01/18 10:45 p.m.11 views

CVE-2026-23626 Kimai Vulnerable to Authenticated Server-Side Template Injection (SSTI)

Kimai is a web-based multi-user time-tracking application. Prior to version 2.46.0, Kimai's export functionality uses a Twig sandbox with an overly permissive security policy DefaultPolicy that allows arbitrary method calls on objects available in the template context. An authenticated user with...

6.8CVSS5.7AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/18 2:26 a.m.17 views

CVE-2025-14450

The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'changewalletfundrequeststatuscallback' function in all versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with...

6.5CVSS5.1AI score0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/17 4:02 p.m.9 views

CVE-2025-15531 Open5GS context.c sgwc_bearer_add assertion

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwcbeareradd of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The...

6.9CVSS5.1AI score0.00733EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/01/17 8:24 a.m.39 views

CVE-2025-14078 PAYGENT for WooCommerce <= 2.4.6 - Missing Authorization to Unauthenticated Payment Callback Manipulation

The PAYGENT for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.6. This is due to missing authorization checks on the paygentcheckwebhook function combined with the paygentpermissioncallback function unconditionally returning true ...

5.3CVSS0.00266EPSS
SaveExploits0References5
NVD
NVD
added 2026/01/17 7:16 a.m.16 views

CVE-2026-0833

The Team Section Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user-supplied social network link URLs. This makes it possible for authenticate...

6.4CVSS0.00245EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/17 6:42 a.m.40 views

CVE-2025-12984

The CVE-2025-12984 entry pertains to the WordPress plugin Advanced Ads – Ad Manager & AdSense. It describes an SQL Injection in the order parameter affecting all versions up to 2.0.15 due to insufficient escaping and inadequate query preparation. The vulnerability requires authenticated Administr...

4.9CVSS6.2AI score0.00331EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/17 6:42 a.m.34 views

CVE-2026-0833

CVE-2026-0833 corresponds to a Stored Cross-Site Scripting vulnerability in the WordPress Team Section Block plugin (versions

6.4CVSS4.7AI score0.00245EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/01/17 4:34 a.m.6 views

CVE-2025-12825 User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposure

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getcf7formdata' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form settings...

5.3CVSS5.5AI score0.00544EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/17 3:16 a.m.22 views

CVE-2025-14450

The Wallet System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'changewalletfundrequeststatuscallback' function in all versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with...

6.5CVSS0.00222EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/17 2:49 a.m.9 views

WordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Spectra versions = 2.19.17...

5.3CVSS5.3AI score0.00228EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/01/17 12:30 a.m.10 views

EUVD-2025-206296

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this vulnerability is an unknown functionality of the component GTPv2 Bearer Response Handler. Such manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may...

6.9CVSS6.2AI score0.00848EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/01/17 12:00 a.m.20 views

PT-2026-3347

The User Registration Using Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get cf7 form data' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to retrieve form...

5.3CVSS5.3AI score0.00544EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/17 12:00 a.m.21 views

PT-2026-3363

A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The manipulation results in resource consumption. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks...

6.9CVSS6.5AI score0.00997EPSS
SaveExploits1References9
Patchstack
Patchstack
added 2026/01/16 11:46 p.m.13 views

WordPress Spin Wheel plugin <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter vulnerability

Unauthenticated Client-Side Prize Manipulation via 'prizeindex' Parameter vulnerability discovered by jsonc in WordPress Plugin Spin Wheel versions = 2.1.0...

5.3CVSS7AI score0.00318EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/01/16 4:53 p.m.14 views

EUVD-2026-3124

Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery. Prior to 2.11.0, there is an arbitrary file read in Google BigQuery Sink connector. Aiven's Google BigQuery Kafka Connect Sink connector requires Google Cloud credential configurations...

7.7CVSS6.5AI score0.00382EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/16 11:16 a.m.15 views

PYSEC-2026-10

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result,...

7.5CVSS6AI score0.02014EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/16 11:10 a.m.8 views

OESA-2026-1066 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

7.5CVSS7AI score0.0043EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/16 6:43 a.m.7 views

CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS5.4AI score0.00246EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/01/16 6:43 a.m.35 views

CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS0.00246EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/16 12:24 a.m.17 views

CVE-2025-70310

A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...

5.5CVSS7AI score0.00146EPSS
SaveExploits1References1
Rows per page
Query Builder