Themegoods Grand News Authorization Issue Vulnerability

Themegoods Grand News versions 3.4 and earlier have a vulnerability related to authorization issues. This vulnerability arises because unverified attackers can exploit improper access control mechanisms, allowing unauthorized modifications to data...

WordPress GeoDirectory code injection vulnerability

WordPress GeoDirectory 2.8.187 and earlier versions have a code injection vulnerability. This vulnerability stems from the designtype parameter, which involves local file inclusion. It may allow unauthenticated attackers to include and execute any.php file on the server, thereby bypassing access...

WordPress Booking System SQL Injection Vulnerability

The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...

Joomunited WP File Download Cross-Site Script Vulnerability

Joomunited WP File Download versions 6.3.6 and earlier have a cross-site scripting vulnerability, which is due to a vulnerability that can be exploited by cross-site scripting attacks...

WordPress SpeedyCache information leakage vulnerability

WordPress SpeedyCache 1.4.2 and earlier versions have a vulnerability related to information leakage. This vulnerability arises from improper handling of the 'commentauthor' and 'commentauthoremail' parameters. The writing path lacks checks for the 'commentauthor' cookie, allowing malicious...

WordPress rtMedia for WordPress, BuddyPress, and bbPress: Authorization issue vulnerabilities

WordPress rtMedia for WordPress, BuddyPress, and bbPress versions 4.7.13 and earlier have a licensing issue vulnerability. This vulnerability stems from insufficient file path validation in process functions, which may allow unauthenticated attackers to delete any security files on the server...

WordPress Payment Processing via MetaMask for WooCommerce: Input Validation Vulnerability

WordPress payments via MetaMask for WooCommerce versions 1.7.2 and earlier have a vulnerability related to input validation errors. This vulnerability stems from unvalidated bypass attempts...

OpenPanel input validation error vulnerability

OpenPanel 2.3.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from CSV formula injections. Unverified attackers can exploit this flaw by providing a custom profile ID as part of the /track endpoint, allowing them to inject spreadsheet...

OpenLIT authorization issue vulnerabilities

OpenLIT 2.1.0 version has an authorization issue vulnerability. This vulnerability arises from bypassing authorizations by using a forged x-OpenLIT-project-id header. As a result, authenticated users may access telemetry data from other projects, including LLM prompts and completion content...

WordPress Social Share Icons & Social Share Buttons Cross-site Script Vulnerabilities

WordPress Social Share Icons & Social Share Buttons versions 3.7.5 and earlier have a cross-site scripting vulnerability. This vulnerability allows unauthenticated attackers to perform cross-site scripting attacks...

WordPress Booster for WooCommerce: Deserialization injection vulnerability

WordPress Booster for WooCommerce 8.4.0 and earlier versions have a deserialization injection vulnerability. This vulnerability allows unauthorized attackers to perform PHP object injections...

WordPress WP Ultimate CSV Importer SQL Injection Vulnerability

WordPress WP Ultimate CSV Importer 9.2 and earlier versions have a SQL injection vulnerability, which can be exploited by SQL injection attacks...

Mikado-Themes TouchUp Code Injection Vulnerability

Mikado-Themes versions prior to 1.4 have a code injection vulnerability. This vulnerability stems from unvalidated local file inclusions, which may allow attackers to access local files...

Mymoun Backhoe Code Injection Vulnerability

The Mymoun Backhoe 2.0 and earlier versions have a code injection vulnerability, which stems from unvalidated local file inclusion...

WordPress WPForms cross-site scripting vulnerabilities

WordPress WPForms 2.0.2.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper handling of parameters referenced by smart tags, particularly in the cleanup of attacker-controlled key inputs and output escaping. It may lead to reflective cross-site...

InnoShop input validation error vulnerability

InnoShop version 0.9.2 has a vulnerability in input validation. This vulnerability stems from improper handling of the source parameter in the AI Core MCP fileUpload tool. It allows authenticated administrators with the filescreate permission to use the file:// or php:// stream wrapper to read...

Nexcess Kadence Blocks: Cross-site Scripting Vulnerabilities

Nexcess Kadence Blocks versions 3.7.12 and earlier have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping, leading to a stored-xss attack through the Block Font Family Attribute. Attackers with author-level or higher permissions ca...

WordPress Getwid Cross-Site Script Vulnerability

WordPress versions prior to 3.0.1 have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the data-image-points parameter input and inadequate escaping of output data. It may allow authenticated attackers with privileges of contributor or higher to inject...

Lulu AniWorld Downloader Authorization Issues Vulnerability

Lulu AniWorld Downloader versions prior to 5.3.0 have a vulnerability related to authorization. This vulnerability stems from the improper handling of authentication attempts by the /login POST handler in the WebUI. As a result, unauthorized attackers can enumerate usernames through the verifyuse...

tielabs jannah cross-site scripting vulnerabilities

Tielabs Jannah versions 7.6.5 and earlier have a cross-site scripting vulnerability. This vulnerability allows unauthenticated attackers to be exploited by cross-site scripting attacks...

WordPress Events Manager SQL Injection Vulnerability

WordPress Events Manager versions 7.4.6 and earlier have a SQL injection vulnerability. This vulnerability stems from SQL injections by subscribers and can lead to SQL injection attacks...

WordPress FunnelKit cross-site scripting vulnerability

WordPress FunnelKit 3.16.0.5 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. It is exploited through the shippingfirstname parameter, allowing for storage-based cross-site scripting attacks. This...

WordPress Noptin Cross-Site Script Vulnerability

WordPress Noptin 4.3.10 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping. Unauthenticated attackers can inject arbitrary web scripts using the 'noptinfields' parameter such as firstname, resulting in...

WordPress ACF Frontend Admin by DynamiApps: Cross-site Script Vulnerability

WordPress ACF Frontend Admin by DynamiApps version 3.28.36 and earlier has a cross-site scripting vulnerability. This vulnerability stems from the getdynamicvalues function’s text-level search and replacement operation on content, without proper HTML parsing. As a result, authenticated attackers...

WordPress Filter Everything Cross-Site Script Vulnerabilities

WordPress Filter Everything 1.9.6 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from the flrtelementorloadmoreanchor function’s insufficient input sanitization and output escaping. The function does not escape the URL retrieved from $SERVER'REQUESTURI' a...

Johann Heyne Table Field Add-on for ACF and SCF: Cross-site scripting vulnerabilities

The Johann Heyne Table Field Add-on for ACF and SCF versions 1.3.35 and earlier contains a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping. Identified attackers with contributor-level or higher permissions can inject arbitrary...

WordPress Contact Form 7 has a vulnerability related to information leakage.

WordPress Contact Form 7 versions 5.0.7 and earlier have a vulnerability that leads to information leakage. This vulnerability occurs due to the exposure of sensitive data without authentication, which may result in the disclosure of sensitive information...

Himovo MOVO authorization issue vulnerability

The Himovo MOVO versions 0.2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from an authorization bypass in the chat-api documentation endpoints. It allows authenticated users to access objects stored by other users by providing arbitrary object paths. Attackers...

EIP Stack Group OpENER Buffer Error Vulnerability

The EIP Stack Group OpENer has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection path resolver, which could allow remote attackers to cause a denial of service attack...

NetEase Youdao LobsterAI has a vulnerability regarding input validation.

From the version of NetEase Youdao LobsterAI on April 23, 2026, to April 23, 2026.5.27, there is a vulnerability in input validation. This vulnerability stems from the skills:delete IPC handler, which trusts the openclawSourceDir value from the skills.meta.json file during the uninstall process...

John Broadway Pacioli authorization issue vulnerability

In versions of John Broadway Pacioli from 0.9.6 to 0.10.0, there is an authorization issue vulnerability. This vulnerability stems from the Pacioli-Guard documentation layer not checking whether the consent marker has been authorized for cancellation. This allows nested cancellation operations to...

Hayat Health Facilities Hayat Mobile Authorization Issue Vulnerability

Hayat Health Facilities Hayat Mobile versions 3.3.0 to 3.4.0 had an authorization issue vulnerability. This vulnerability stemmed from the use of client authentication, which could lead to authentication bypasses...

Illumos-Gate resource management error vulnerability

The illumos-gate vulnerability involves a resource management issue. This vulnerability stems from the switcher function in the nscd frontend code located at usr/src/cmd/nscd/nscdfrontend.c. This function does not properly close file descriptors that are passed through the doorcall function but a...

MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system with path traversal vulnerabilities

MynaParrot Plug-N-Meet – A scalable, customizable, open-source web conferencing system. Versions 2.5.2 and earlier have a path traversal vulnerability. This vulnerability stems from a path traversal issue with the whiteboard conversion endpoint. Attackers can provide a /../ sequence, use a...

Posit Shiny for Python: Path traversal vulnerability

Posit Shiny for Python versions 1.4.0 to 1.6.4 had a path traversal vulnerability. This vulnerability stemmed from the bookmark restoration function’s acceptance of stateid provided by the client. The function did not verify whether it was a single secure path segment before appending it to the...

EIP Stack Group OpENER security vulnerability

EIP Stack Group OpENer v2.3 version contains a security vulnerability. This vulnerability stems from an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection path resolver, which could allow remote attackers to cause a denial-of-service attack...

ProcessMaker SQL Injection Vulnerability

Versions of ProcessMaker prior to 2026.14.3 have a SQL injection vulnerability. This vulnerability stems from the unvalidated orderby parameter in the GET /api/1.0/tasks endpoint. The orderby parameter is bound to user-controlled processrequests column names, which are used in the DB::raw SQL...

EIP Stack Group OpENER security vulnerability

EIP Stack Group OpENer v2.3.0 version contains a security vulnerability. This vulnerability arises from an out-of-bounds read in the unconnected explicit message path, which could be exploited by remote attackers to cause a denial-of-service attack...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities arise from the rejection of legitimate CA certificates, which may lead to denial-of-service attacks...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has security vulnerabilities. These vulnerabilities stem from a failure to reject X.509 certificates that contain contradictory combinations of key usage KU and extended key usage EKU. This could allow attackers to obtain sensitive information...

GnuTLS security vulnerabilities

GnuTLS version 3.8.13 has a security vulnerability. This vulnerability stems from improper certificate verification, causing the application to reject legitimate certificates of legitimate users, potentially leading to denial-of-service attacks...

Splunk Enterprise: Permissions licensing and access control issues

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from improper access control mechanisms, which may allow unauthorized access...

Sungrow iSolarCloud authorization issue vulnerability

Sungrow iSolarCloud versions prior to 2026 have an authorization issue vulnerability. This vulnerability stems from the logintype parameter being set to 5 in the login request, leading to authentication bypass and account takeover, which could potentially cause local power outages in Europe...

Splunk Enterprise resource management error vulnerability

Splunk Enterprise versions prior to 10.4.3, 10.2.7, 10.0.10, and 9.4.15 have a resource management vulnerability caused by improper control of the resource lifecycle...

Splunk Enterprise processing logic error vulnerability

Versions of Splunk Enterprise prior to 10.4.3, 10.2.7 prior to version 10.2.7, 10.0.10 prior to version 10.0.0, and 9.4.15 prior to version 9.4.15 have a processing logic vulnerability that stems from a failure of the protection mechanism...

Foreman permission and access control vulnerabilities

Foreman has vulnerabilities related to permission checks and access control. These vulnerabilities stem from improper permission verification by the template preview endpoint. As a result, authenticated users with low-level Viewer permissions can submit requests to obtain sensitive data such as t...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises because when libsoup constructs WebSocket client frames for extremely large outbound payloads, the size value passed to the GByteArray allocation API may be truncated. However, the masking routine still uses the full...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer overflow vulnerability. This vulnerability arises when the max-incoming-payload-size is set to infinity 0. In such cases, libsoup’s SoupWebsocketConnection will expand the incoming GByteArray based on the length of the frame controlled by the attacker. This can lead to ...

GNOME libsoup buffer error vulnerability

GNOME libsoup has a buffer error vulnerability. This vulnerability arises from the handling of incoming WebSocket Pong frames. SoupWebsocketConnection sends the ::pong signal using a GByteArray pointer. Since this signal is declared to be passed as GBytes, processes that follow the GBytes API may...

Ali A. Saleem Anchorme.js Resource Management Error Vulnerability

Ali A. Saleem: Anchorme.js 3.0.8 and earlier versions have a resource management vulnerability. This vulnerability arises from catastrophic backtracking during the extraction of regular expressions from IPv6 hosts, which can lead to Regular Expression Denial-of-Service attacks. Attackers can...