CVE-2026-78247

A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...

ROOT-APP-MAVEN-CVE-2020-36181 CVE-2020-36181 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2020-36181 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2018-5968 CVE-2018-5968 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2018-5968 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2017-15095 CVE-2017-15095 in com.fasterxml.jackson.core:jackson-databind - Patched by Root

Root has patched CVE-2017-15095 in the com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...

CVE-2026-78279

Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...

CVE-2026-78278

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78290

Contributor Cross Site Scripting XSS in Magazine Blocks = 1.8.6 versions...

CVE-2026-78277

Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...

CVE-2026-78258

Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.5 versions...

CVE-2026-66610

Unauthenticated Cross Site Scripting XSS in Urna = 2.6.2 versions...

CVE-2026-66623

Unauthenticated Cross Site Scripting XSS in Social Media & Share Icons = 2.9.9 versions...

CVE-2026-66671

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

CVE-2026-66599

Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...

CVE-2026-66584

Unauthenticated Cross Site Scripting XSS in 12 Step Meeting List = 3.19.16 versions...

CVE-2026-28190

Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...

CVE-2026-32478

Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...

CVE-2026-32551

Unauthenticated SQL Injection in Woo Essential = 4.3.0 versions...

CVE-2026-28165

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

CVE-2026-28166

Unauthenticated Cross Site Scripting XSS in Tourmaster = 5.4.9 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda 2.6 versions...