377923 matches found
CVE-2026-18208
Affected product: Keycloak (keycloak-services OIDC token introspection endpoint). Issue: when a confidential client that expects signed JWT introspection responses inspects a token issued for a different audience, the endpoint still returns the full set of token claims inside a signed JWT field e...
CVE-2026-16105
CVE-2026-16105 is a Keycloak issue in the RoleContainerResource component affecting admin REST API endpoints for composite roles. The flaw arises because certain name-based endpoints do not enforce authorization checks, allowing a delegated administrator with manage-realm permissions to remove es...
CVE-2026-18215
CVE-2026-18215 affects Keycloak (Keycloak-services) where the tenant-restriction for Microsoft accounts is bypassed via the token-exchange feature. A valid Microsoft token from a different organization can be used to access the Keycloak realm, potentially exposing sensitive data or enabling unaut...
CVE-2026-18217
The CVE describes a flaw in Keycloak’s SAML protocol handling with HTTP-Redirect binding. If a client uses a wildcard redirect URL, an attacker can craft a request with malicious parameters, and during user authentication Keycloak may append its legitimate response to the attacker’s parameters. T...
CVE-2026-18218
The vulnerability CVE-2026-18218 affects Keycloak’s TokenManager component. When an administrator revokes tokens for a specific client under a not-before policy, revocation can be silently ignored if the realm’s overall not-before policy is older but non-zero. As a result, previously issued token...
CVE-2026-14919
The vulnerability CVE-2026-14919 affects the ShopMonitor.io WordPress plugin prior to 1.2.0. The plugin’s email-rerouting test mode is inadequately restricted by a trusted-source check that can be satisfied with client-supplied request headers, enabling unauthenticated attackers to redirect outgo...
CVE-2026-14862
The CVE-2026-14862 entry concerns the Support Genix WordPress plugin prior to version 1.4.48 . The issue is an authorization flaw in downloading support-ticket attachments : unauthenticated users who learn the stored attachment file name can download other users’ private attachments. The public s...
CVE-2026-12697
The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, enabling subscriber-level users to permanently delete another user’s AI chat history (IDOR). Root cause: missing ownership check on the delete a...
CVE-2026-12695
CVE-2026-12695 concerns the miniOrange 2FA WordPress plugin (pre-6.2.6). The vulnerability arises because the plugin does not validate the submitted one-time password (OTP) against the targeted user’s stored secret; instead it verifies the OTP against an attacker-supplied value. This enables an u...
CVE-2026-12376
CVE-2026-12376 affects the Academy LMS WordPress plugin up to version 3.8.2. The REST endpoint quiz_attempts does not restrict access to owner-only data, allowing any authenticated user with subscriber-level access (or higher) to read every user’s quiz attempts across the site. This exposes perso...
CVE-2026-13609
The vulnerability affects the Frontend Admin by DynamiApps WordPress plugin (before version 3.29.9). The issue arises because the plugin decodes HTML entities in a submitted form field value after sanitization, which restores HTML tags that the sanitizer had neutralized. A double-encoded payload ...
CVE-2026-13393
The CVE-2026-13393 affects ElementsKit Elementor Addons for WordPress (before 3.10.01). The vulnerability arises from insufficient sanitization/escaping of certain megamenu menu-item settings, allowing stored cross-site scripting (XSS) without requiring unfiltered_html to save them. On multisite,...
CVE-2026-12720
CVE-2026-12720 — Kirki WordPress plugin (before 6.0.13) : The vulnerability arises from insufficient restriction on which classes may be instantiated during deserialization of data stored by unauthenticated users. This enables PHP Object Injection and is triggered when an administrator later revi...
CVE-2026-12721
Summary: CVE-2026-12721 affects the Kirki WordPress plugin prior to 6.0.13. The vulnerability arises because the plugin does not properly sanitise and escape a value taken from the request before using it in a SQL statement, enabling unauthenticated SQL injection. Impact: High risk as it is unaut...
CVE-2026-8155
The issue affects the WooCommerce BuddyPress WordPress plugin? No—the affected product is the BuddyPress WordPress plugin (WordPress) prior to version 14.5.0. The root cause is improper authorization enforcement on private messaging endpoints, allowing any authenticated user (Subscriber+) to read...
CVE-2026-13392
The CVE describes a vulnerability in ElementsKit Elementor Addons for WordPress (or ElementsKit Lite) prior to version 3.10.01 where an admin-user can save a custom-widget definition that is written into a generated PHP file and subsequently executed by the plugin, enabling arbitrary PHP code exe...
CVE-2026-12251
CVE-2026-12251 affects the Ultimate Member WordPress plugin prior to 2.12.1. The vulnerability arises because administrator-level capabilities are not filtered from the roles shown on registration forms, and the post-registration safeguard against elevated accounts is disabled by default. Consequ...
CVE-2026-15258
The vulnerability concerns the Product Feed Manager for WooCommerce WordPress plugin prior to version 7.6.1. It does not properly sanitize or escape product-feed custom filter rules before using them in a SQL query, allowing users with the Contributor role and above to perform SQL injection. Affe...
CVE-2026-15048
CVE-2026-15048 affects the Geeky Bot WordPress plugin prior to version 1.2.8. The flaw is an missing authorization check on one AJAX action, allowing unauthenticated users to access chat-history session metadata (WordPress usernames, user IDs, and timestamps). The connected sources confirm the af...
CVE-2026-15381
The WP Go Maps WordPress plugin prior to version 10.1.04 is vulnerable to an unauthenticated SQL injection via the Markers REST filter due to improper sanitisation/escaping of a parameter before it is used in a SQL query. Impact is low according to the CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:L...
CVE-2026-15209
The CVE-2026-15209 entry concerns the JS Help Desk WordPress plugin (before version 3.1.5). The affected component handles tickets without verifying that the requesting user owns the ticket being loaded, enabling a low-privileged authenticated user to supply another user’s ticket ID and read that...
CVE-2026-14931
The CVE-2026-14931 entry affects the JS Help Desk WordPress plugin prior to version 3.1.4. It enables a support-agent capability to the Contributor role at activation and omits a capability check on a user-listing handler, allowing Contributor-level users to enumerate the email addresses of all r...
CVE-2026-14930
The vulnerability CVE-2026-14930 affects the JS Help Desk WordPress plugin prior to 3.1.4. The issue is in a front-end request dispatcher that performs no authorization, nonce, or ownership checks, allowing unauthenticated users to upload files (constrained to the plugin’s inert allowed extension...
CVE-2026-14929
The CVE-2026-14929 entry concerns the JS Help Desk WordPress plugin, affected versions before 3.1.4. The vulnerability is an IDOR where the plugin does not verify ownership of the targeted reply before updating it, allowing any authenticated user (Subscriber or higher) to overwrite the content of...
CVE-2026-14927
The CVE concerns FluentCart (WordPress plugin) versions prior to 1.5.3. The issue is lack of authorization/ownership checks when rendering customer order documents identified by sequential numeric IDs, enabling unauthenticated visitors to enumerate and disclose customer PII (names, emails, billin...
CVE-2026-14922
WP Photo Album Plus is affected by a stored cross-site scripting (XSS) vulnerability affecting all versions up to 9.2.03.001. The flaw arises in the photo-comment pipeline due to a decode-after-sanitize (double-encoding) sequence: on write, wppa_do_comment() sanitizes input with wppa_filter_html(...
CVE-2026-14928
The CVE covers the JS Help Desk WordPress plugin before 3.1.4, where the nonce-gated search handler does not perform authorization or ownership checks. This allows any authenticated user (Subscriber and above) to read the subject and full message body of every other user’s support tickets, exposi...
CVE-2026-14847
The vulnerability CVE-2026-14847 affects the Paid Membership Subscriptions WordPress plugin prior to version 3.0.7. One of the plugin’s payment-related AJAX actions does not perform capability checks or nonce validation, allowing any authenticated user with Subscriber-level access or higher to di...
CVE-2026-14843
The CVE concerns the WordPress plugin Events Made Easy prior to version 3.1.4 . The vulnerability arises because the plugin does not verify that the requester is authorized to modify a targeted record during an unauthenticated data-change request; it relies on a public nonce with no per-record to...
CVE-2026-14849
The CVE-2026-14849 entry concerns the Paid Membership Subscriptions WordPress plugin (before 3.0.7). Affected component: member and payment export files written to a predictable location in the uploads directory. Root cause: lack of protection allows unauthenticated users to download these export...
CVE-2026-14834
The CVE applies to the Mailgun for WordPress plugin prior to version 2.2.1. An unauthenticated AJAX action (listed as add_list) does not perform capability or nonce checks, permitting unauthenticated attackers to enrol arbitrary email addresses into the site owner’s configured Mailgun mailing lis...
CVE-2026-14921
The CVE covers the Ultimate Addons for WPBakery Page Builder WordPress plugin prior to version 3.21.5, where the shared link-rendering function Ultimate_VC_Addons::uavc_link_init() is implicated. This causes a stored XSS via the ult_buttons shortcode (as listed in CVE-Catalog/CVE records). Affect...
CVE-2026-14845
Summary: The NewStatPress WordPress plugin before 1.4.5 is affected by an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in the Top Post widget. Root cause: user input from unauthenticated visitor requests is not properly sanitized/escaped before storage and later output in the w...
CVE-2026-14554
The CVE-2026-14554 entry concerns the Check & Log Email WordPress plugin (pre-2.0.15). Affected component: SQL query construction where parameters are not properly sanitized/escaped, enabling SQL injection when an attacker has administrator privileges. Impact stated: SQL injection with high confi...
CVE-2026-14833
CVE-2026-14833 corresponds to a stored XSS risk in the Lightbox with PhotoSwipe WordPress plugin prior to 5.9.0. The root cause is lack of sanitisation/escaping of a link data attribute when rendering the image lightbox caption, which allows users with author-level access (lacking unfiltered_html...
CVE-2026-14830
The CVE describes a vulnerability in the FlxWoo WordPress plugin prior to version 3.1.1 where the payment status of a checkout session is not verified with the payment processor before marking an order as paid. This allows unauthenticated attackers to complete WooCommerce orders without payment. ...
CVE-2026-14333
CVE-2026-14333 affects the Demi WordPress plugin (before 0.0.7). The vulnerability arises because full-site backup archives are stored in a publicly accessible location with a predictable filename and without access protection. This enables unauthenticated attackers to download complete backups, ...
CVE-2026-14319
The CVE-2026-14319 entry concerns the GiveWP WordPress plugin prior to version 4.16.3. A REST API endpoint does not properly restrict access, allowing unauthenticated users to retrieve recurring-donation records, including names and subscription details of anonymous donors. Root cause is insuffic...
CVE-2026-14317
CVE-2026-14317 : The GiveWP WordPress plugin is vulnerable in versions before 4.16.3. It does not restrict the set of available payment gateways to those enabled by the administrator and derives this from request input, allowing unauthenticated users to complete donations via a payment gateway th...
CVE-2026-18452
CVE-2026-18452 affects DMS+ (Non-Mobile) by Rich Source and is due to use of hard-coded credentials (a fixed API key). Unauthenticated remote attackers can exploit this to gain control over all installed DMS+ devices. The provided metrics indicate a critical impact (CVSS v4.0 10.0; CVSS v3.1 10.0...
CVE-2026-16236
CVE-2026-16236 affects Realtyna Organic IDX plugin for WordPress (
CVE-2026-14483
The CVE-2026-14483 entry describes an unauthenticated Arbitrary File Upload in the Realtyna Organic IDX plugin + WPL Real Estate (
CVE-2026-51371
Technical details for CVE-2026-51371 are not publicly available in the provided documents. There are no affected products, root cause, or fixes described. Monitor for updates from official sources.
CVE-2026-56673
ComfyUI (multiple nodes: LoadImage, LoadImageMask, LoadImageOutput, LoadAudio, LoadLatent, LoadVideo, Load3D) suffers a path traversal in pre-0.28.0 builds where folder_paths.get_annotated_filepath and exists_annotated_filepath join workflow-controlled annotated filenames to a base directory with...
CVE-2026-62416
Technical details for CVE-2026-62416 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2026-60011
Technical details for CVE-2026-60011 are not publicly available in the provided documents. No affected products, vectors, or fixes are disclosed. Monitor for updates.
CVE-2026-63563
Technical details for CVE-2026-63563 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, vectors, or impact can be confirmed from the supplied data.
CVE-2026-63545
Technical details for CVE-2026-63545 are not publicly available in the provided documents; monitor for updates from CIRCL/JVN.