Lucene search
+L

275613 matches found

Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.21 views

PT-2026-78990

Name of the Vulnerable Software and Affected Versions Smart Cleaning versions prior to 4.8.7 Description An arbitrary file upload issue exists that allows users with subscriber privileges to upload unauthorized files to the system. Recommendations Update to a version newer than 4.8.6...

9.9CVSS5.5AI score0.00447EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.13 views

PT-2026-78975

Name of the Vulnerable Software and Affected Versions Directory Pro versions prior to 2.5.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...

9.3CVSS5.8AI score0.00291EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.17 views

PT-2026-78973

Name of the Vulnerable Software and Affected Versions Form Maker by 10Web versions prior to 1.15.47 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

7.1CVSS5.2AI score0.0018EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.17 views

PT-2026-78992

Name of the Vulnerable Software and Affected Versions EPROLO Dropshipping versions prior to 2.4.3 Description Broken access control allows unauthenticated users to gain unauthorized access to restricted areas or functions of the system. Recommendations Update to a version newer than 2.4.2...

7.1CVSS5.2AI score0.00211EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.18 views

PT-2026-78888

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the eme single event page template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...

7.5CVSS6.4AI score0.00518EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-78991

Name of the Vulnerable Software and Affected Versions Warehouse Cargo versions prior to 2.7.0 Description An issue allows subscribers to perform arbitrary file uploads, which could lead to the upload of unauthorized files to the server. Recommendations Update to a version newer than 2.6.9...

9.9CVSS5.5AI score0.00447EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.17 views

PT-2026-78895

Name of the Vulnerable Software and Affected Versions JSON Options versions prior to 0.0.5 Description The JSON Options WordPress plugin lacks capability checks and nonce verification on an action that executes on every request. This allows unauthenticated users to update arbitrary WordPress...

9.8CVSS5.6AI score0.00341EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.19 views

PT-2026-78976

Name of the Vulnerable Software and Affected Versions Flatastic versions prior to 2.1 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the unserialize function, allowing an attacker to manipulate serialized objects and...

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.22 views

PT-2026-78968

Unauthenticated SQL Injection in TheGem Elementor = 5.12.3 versions...

9.3CVSS5.9AI score0.00291EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.12 views

PT-2026-78980

Name of the Vulnerable Software and Affected Versions Abandoned Cart Pro for WooCommerce versions prior to 10.4.1 Description An issue allows unauthenticated users to perform privilege escalation. Recommendations Update Abandoned Cart Pro for WooCommerce to version 10.4.1 or later...

9.8CVSS5.2AI score0.00331EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.15 views

PT-2026-78974

Name of the Vulnerable Software and Affected Versions Homlisti versions prior to 3.1.3 Description Broken access control exists for subscribers, allowing unauthorized access or actions. Recommendations Update to a version newer than 3.1.2...

6.5CVSS5.2AI score0.00279EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/08/19 7:32 p.m.30 views

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses

NPM: SearXNG Basic Authentication Credentials Exposed Through MCP Logs and JSON-RPC Error Responses vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.12.0...

5.3AI score
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2026/08/19 7:23 p.m.6 views

NPM: SearXNG MCP Server: Additional hardened-mode SSRF bypasses

NPM: SearXNG MCP Server: Additional hardened-mode SSRF bypasses vulnerability discovered by ? in WordPress Npm mcp-searxng versions 1.2.1...

5.2AI score
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/08/19 7:17 p.m.8 views

CVE-2026-18315

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...

9.8CVSS0.00598EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/08/19 6:27 p.m.35 views

CVE-2026-18315 TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...

9.8CVSS0.00598EPSS
SaveExploits1References5
CVE
CVE
added 2026/08/19 6:27 p.m.30 views

CVE-2026-18315

The TrueBooker – Appointment Booking and Scheduler System WordPress plugin (all versions ≤ 1.2.6 ) contains an unauthenticated authorization bypass in the admin_user_create_cus AJAX handler. The handler passes the attacker-controlled truebooker_wp_user_id parameter directly to wp_update_user with...

9.8CVSS5.4AI score0.00598EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/08/19 6:27 p.m.10 views

EUVD-2026-62630

The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...

9.8CVSS5.4AI score0.00598EPSS
SaveExploits1References5
CVE
CVE
added 2026/08/19 5:24 p.m.220 views

CVE-2026-32475

Elementor Pro WordPress plugin (≈6,000,000 active installations) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.2.1 . The root cause is a logic error in the Upload::validation() function where return is used instead of continue when the first array el...

9CVSS5.2AI score0.02374EPSS
SaveIn wildExploits2References2
EUVD
EUVD
added 2026/08/19 5:24 p.m.21 views

EUVD-2026-62595

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

9CVSS5.3AI score0.02374EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2026/08/19 5:24 p.m.15 views

CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

9CVSS5.2AI score0.02374EPSS
SaveExploits2References2
Rows per page
Query Builder