409 matches found
WordPress Button Generator <2.3.3 - Remote File Inclusion
WordPress Button Generator before 2.3.3 within the wow-company admin menu page allows arbitrary file inclusion with PHP extensions as well as with data:// or http:// protocols, thus leading to cross-site request forgery and remote code execution. id: CVE-2021-25052 info: name: WordPress Button...
CVE-2026-1641
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...
CVE-2026-1641 Wow Elements Addons for Elementor <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery via Changelog File Setting
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...
CVE-2026-1641 Wow Elements Addons for Elementor <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery via Changelog File Setting
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...
EUVD-2026-83550
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...
CVE-2026-1641
The Wow Elements Addons for Elementor plugin for WordPress is affected by a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 1.11.2 . The root cause is the plugin passing user-controlled input from the 'Changelog File' setting directly to the wp_remote_get func...
CVE-2026-1641: Server-Side Request Forgery (SSRF)
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.11.2. This is due to the plugin passing user-controlled input from the 'Changelog File' setting directly to the wpremoteget function without adequate...
PT-2026-95783
Name of the Vulnerable Software and Affected Versions Wow Elements Addons for Elementor versions prior to 1.11.3 Description This issue is a Server-Side Request Forgery, a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. Authenticated...
WordPress Wow Elements Addons for Elementor plugin <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery vulnerability
Authenticated Contributor+ Server-Side Request Forgery vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777, Waris Damkham in WordPress Plugin Wow Elements Addons for Elementor versions = 1.11.2...
CVE-2026-69900
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69275
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73618
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69900
CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...
EUVD-2026-73433
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69275
CVE-2026-69275 is a use-after-free vulnerability in the Kernel Streaming WOW Thunk Service Driver that allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector , high complexity...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87323
Name of the Vulnerable Software and Affected Versions Kernel Streaming WOW Thunk Service Driver affected versions not specified Description A use-after-free condition in the Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a...