418139 matches found
EUVD-2026-37623
Unauthenticated Broken Authentication in wpForo Forum = 3.1.0 versions...
EUVD-2026-37612
Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...
EUVD-2026-37595
Unauthenticated Broken Access Control in User Registration Stripe = 1.3.14 versions...
EUVD-2026-37491
Unauthenticated PHP Object Injection in Esmée = 1.4 versions...
EUVD-2026-37493
Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...
EUVD-2026-37598
Subscriber Arbitrary File Upload in Restaurant Zone = 0.7.8 versions...
EUVD-2026-37593
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
EUVD-2026-37487
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
EUVD-2026-37603
Unauthenticated Cross Site Scripting XSS in collectchat = 2.4.9 versions...
EUVD-2026-37488
Unauthenticated PHP Object Injection in Roisin = 1.4 versions...
EUVD-2026-37602
Unauthenticated PHP Object Injection in EasyMeals = 1.5.1 versions...
EUVD-2026-37594
Unauthenticated PHP Object Injection in WooCommerce Product Filters 2.0.6 versions...
EUVD-2026-37581
Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...
EUVD-2026-37582
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...
EUVD-2026-37597
Unauthenticated PHP Object Injection in Reina = 2.1 versions...
EUVD-2026-37599
Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...
EUVD-2026-37601
Subscriber Arbitrary File Upload in Charity Zone = 1.1.1 versions...
EUVD-2026-37492
Unauthenticated PHP Object Injection in Behold = 1.5 versions...
EUVD-2026-37607
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
EUVD-2026-37609
Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...
EUVD-2026-37600
Subscriber Arbitrary File Upload in Kids Gift Shop = 0.5.4 versions...
EUVD-2026-37489
Unauthenticated PHP Object Injection in TechLink = 1.3 versions...
EUVD-2026-37605
Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.37 versions...
EUVD-2026-37596
Unauthenticated Local File Inclusion in ChapterOne = 1.7 versions...
EUVD-2026-37486
Unauthenticated PHP Object Injection in LuxeDrive = 1.4 versions...
EUVD-2026-37490
Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...
EUVD-2026-37608
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
EUVD-2026-37485
Unauthenticated PHP Object Injection in Laurits = 1.5.1 versions...
EUVD-2026-37604
Unauthenticated Insecure Direct Object References IDOR in Salon booking system = 10.30.24 versions...
EUVD-2026-37606
Unauthenticated Cross Site Scripting XSS in Kapee 1.7.1 versions...
EUVD-2026-37673
Unauthenticated PHP Object Injection in Zermatt = 1.6.1 versions...
EUVD-2026-37675
Unauthenticated Local File Inclusion in Malmö = 2.2 versions...
EUVD-2026-37588
Author Broken Access Control in W3 Total Cache = 2.9.1 versions...
EUVD-2026-37478
Unauthenticated PHP Object Injection in Fidalgo = 1.2.2 versions...
EUVD-2026-37590
Unauthenticated Cross Site Scripting XSS in WPZOOM Addons for Elementor = 1.3.4 versions...
EUVD-2026-37474
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
EUVD-2026-37502
Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2...
EUVD-2026-37481
Unauthenticated Local File Inclusion in Mr. SEO = 2.0 versions...
EUVD-2026-37589
Unauthenticated SQL Injection in Blocksy Companion Pro 2.1.29 versions...
EUVD-2026-37480
Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...
EUVD-2026-37672
Unauthenticated Local File Inclusion in Mikado Core = 1.6 versions...
EUVD-2026-37674
Subscriber Privilege Escalation in MultiLoca = 4.2.15 versions...
EUVD-2026-37676
Unauthenticated PHP Object Injection in Mildhill = 1.5 versions...
EUVD-2026-37473
Unauthenticated PHP Object Injection in Elementra = 1.0.9 versions...
EUVD-2026-37475
Unauthenticated Local File Inclusion in Getaway 1.8 versions...
EUVD-2026-37587
Subscriber Arbitrary File Upload in Webenvo = 0.0.6 versions...
EUVD-2026-37484
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
EUVD-2026-37477
Unauthenticated Local File Inclusion in Aperitif = 1.5 versions...
EUVD-2026-37479
Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...
EUVD-2026-37483
Unauthenticated PHP Object Injection in Valiance = 1.2 versions...