Lucene search
+L

15 matches found

NVD
NVD
•added 2026/10/03 6:16 a.m.•3 views

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

8.6CVSS0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/03 6:00 a.m.•22 views

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

0.00172EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/03 6:00 a.m.•5 views

EUVD-2026-91943

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

8.6CVSS5.9AI score0.00172EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/03 6:00 a.m.•3 views

CVE-2026-89236

The SaveTo Wishlist Lite WordPress plugin, in versions prior to 1.1.5 , is vulnerable to SQL Injection . The root cause is the failure to sanitize and escape parameters used within the ORDER BY clause of a SQL query, specifically through the 'sort_column' and 'sort_order' parameters. This allows ...

8.6CVSS5.9AI score0.00172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/03 6:00 a.m.•2 views

CVE-2026-89236 SaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' Parameters

The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...

5.9AI score0.00172EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/13 7:24 p.m.•16 views

CVE-2026-39588

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•22 views

EUVD-2026-20229

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.9AI score0.00294EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•17 views

CVE-2026-39588

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.3CVSS0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•36 views

CVE-2026-39588

CVE-2026-39588 affects the WordPress plugin NM Gift Registry and Wishlist Lite (nm-gift-registry-and-wishlist-lite) up to version 5.13. The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, allowing unauthorized access actions. The CVS...

5.3CVSS6AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•9 views

CVE-2026-39588 WordPress NM Gift Registry and Wishlist Lite plugin <= 5.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

6AI score0.00294EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•10 views

CVE-2026-39588

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.9AI score0.00294EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•36 views

CVE-2026-39588 WordPress NM Gift Registry and Wishlist Lite plugin <= 5.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.3CVSS0.00294EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2026-39588: Missing Authorization

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.3CVSS5.9AI score0.00294EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•18 views

WordPress plugin NM Gift Registry and Wishlist Lite 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•22 views

PT-2026-31165

Missing Authorization vulnerability in nmerii NM Gift Registry and Wishlist Lite nm-gift-registry-and-wishlist-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NM Gift Registry and Wishlist Lite: from n/a through = 5.13...

5.9AI score0.00294EPSS
SaveExploits0References3
Rows per page
Query Builder