472741 matches found
CVE-2026-16070
The CVE-2026-16070 relates to the Brizy WordPress plugin (before 2.8.19). The vulnerability arises because it does not properly verify authorization when updating a template’s type meta, validating a request parameter different from the one used in the write operation. This IDOR-like flaw enables...
CVE-2026-14848
The issue affects the Paid Membership Subscriptions WordPress plugin before version 3.0.8. The change-subscription checkout does not verify that the target subscription belongs to the current user, allowing any authenticated user with Subscriber-level access or higher to hijack another member’s s...
CVE-2026-14872 Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...
CVE-2026-14939
The Visualizer WordPress plugin is affected: versions before 4.0.6 expose a vulnerability where an attacker with Contributor-level access can supply a URL that is not validated to safe address ranges, enabling server-side requests (SSRF) to link-local instance-metadata endpoints. The fetched resp...
EUVD-2026-52586
The Paid Membership Subscriptions WordPress plugin before 3.0.8 does not verify that the subscription being modified through its change-subscription checkout belongs to the current user, allowing any authenticated user with Subscriber-level access and above to take over another member's...
CVE-2026-14872
The CVE affects the Database for Contact Form 7, WPforms, Elementor Forms WordPress plugin, specifically versions before 1.5.5. The root cause is improper sanitisation/escaping of a parameter before use in a SQL statement, enabling a SQL Injection. The vulnerability is exploitable by users with a...
CVE-2026-16618 ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution
The Improve SEO WordPress plugin through 2.0.11 does not properly validate uploaded files, checking only the file content type while writing the file with the attacker-supplied extension into a publicly accessible directory, allowing unauthenticated users to upload executable PHP files and achiev...
ROOT-OS-UBUNTU-2204-CVE-2025-23151 CVE-2025-23151 in linux - Patched by Root
Root has patched CVE-2025-23151 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-31423 CVE-2026-31423 in linux - Patched by Root
Root has patched CVE-2026-31423 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-39823 CVE-2025-39823 in linux - Patched by Root
Root has patched CVE-2025-39823 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-48873 CVE-2024-48873 in linux - Patched by Root
Root has patched CVE-2024-48873 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-45919 CVE-2026-45919 in linux - Patched by Root
Root has patched CVE-2026-45919 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38705 CVE-2025-38705 in linux - Patched by Root
Root has patched CVE-2025-38705 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-68246 CVE-2025-68246 in linux - Patched by Root
Root has patched CVE-2025-68246 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23119 CVE-2026-23119 in linux - Patched by Root
Root has patched CVE-2026-23119 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-37852 CVE-2025-37852 in linux - Patched by Root
Root has patched CVE-2025-37852 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38639 CVE-2025-38639 in linux - Patched by Root
Root has patched CVE-2025-38639 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38340 CVE-2025-38340 in linux - Patched by Root
Root has patched CVE-2025-38340 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...