Lucene search
+L

380955 matches found

NVD
NVD
added 4 days ago7 views

CVE-2026-16079

The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content in all versions up to, and including, 1.6.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

6.5CVSS0.00281EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago6 views

CVE-2026-13167

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This...

4.3CVSS0.00346EPSS
SaveExploits0References12
NVD
NVD
added 4 days ago5 views

CVE-2026-13358

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.10 via the ssapastappointments due to missing validation on a user controlled key. This makes it...

6.5CVSS0.00486EPSS
SaveExploits0References12
NVD
NVD
added 4 days ago9 views

CVE-2026-14498

The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wpajaxqwformajax handler, combined with unsanitized...

8.8CVSS0.00549EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago7 views

CVE-2026-15009

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS0.0028EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago6 views

CVE-2026-15066

The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Extracted Comments in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with translator-level...

6.4CVSS0.00262EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago7 views

CVE-2026-15002

The Platnosci Online Blue Media Autopay plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.0 via the 'bmwoocommercecsseditorcontent' POST parameter. This is due to the CssEditor::handlesave method being wired to the WordPress 'init' hook by...

7.2CVSS0.00307EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago7 views

CVE-2026-14524

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSolfileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete arbitrary files on t...

9.1CVSS0.00702EPSS
SaveExploits0References5
NVD
NVD
added 4 days ago5 views

CVE-2026-12477

The Gravity Booster – Styles & Layouts for Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

4.4CVSS0.00258EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago6 views

CVE-2026-11780

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'questiontitle' parameter in all versions up to, and including, 11.2.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00307EPSS
SaveExploits0References11
NVD
NVD
added 4 days ago6 views

CVE-2026-12905

The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment method of the Mobile Staff Cabinet API resource=appointment, action=booklymobilestaffcabinet in...

4.3CVSS0.0029EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago7 views

CVE-2025-10005

The PPWP – Password Protect WordPress | 1 Most-Reviewed Password Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.9.20 via the ppwfreesetpassword AJAX action due to missing validation on a user controlled key. This makes it...

4.3CVSS0.00243EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago7 views

CVE-2026-2487

The Admin Custom Login plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS0.00203EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago5 views

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS0.00242EPSS
SaveExploits0References8
NVD
NVD
added 4 days ago8 views

CVE-2026-19929

A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Template Processing. The manipulation leads to improper neutralization of special elements use...

6.5CVSS0.00284EPSS
SaveExploits0References10
NVD
NVD
added 4 days ago7 views

CVE-2026-19928

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...

6.5CVSS0.00251EPSS
SaveExploits0References10
NVD
NVD
added 4 days ago7 views

CVE-2026-19927

A vulnerability was found in OpenBoxes up to 0.9.7. The impacted element is the function Upload of the file grails-app/controllers/org/pih/warehouse/product/ProductController.groovy of the component Product Upload Endpoint. Performing a manipulation of the argument params.url results in server-si...

6.5CVSS0.00251EPSS
SaveExploits0References10
NVD
NVD
added 4 days ago10 views

CVE-2026-19925

A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and...

5.8CVSS0.0021EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago11 views

CVE-2026-19926

A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The explo...

7.5CVSS0.00266EPSS
SaveExploits0References7
NVD
NVD
added 4 days ago11 views

CVE-2026-19924

A security vulnerability has been detected in Tenda AC10 16.03.10.09multiTDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly an...

10CVSS0.00901EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago10 views

CVE-2026-19923

A weakness has been identified in code-projects Online Shopping System 1.0. This affects an unknown part of the file /checkoutprocess.php. Executing a manipulation of the argument totalcount can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago14 views

CVE-2026-19922

A security flaw has been discovered in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /checkout.php. Performing a manipulation of the argument amount1 results in cross site scripting. The attack can be initiated remotely. The exploit has...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago9 views

CVE-2026-19921

A vulnerability was identified in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /homeaction.php. Such manipulation of the argument catid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago10 views

CVE-2026-19918

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function getstatus of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been...

6.3CVSS0.00228EPSS
SaveExploits0References5
NVD
NVD
added 4 days ago10 views

CVE-2026-19920

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added 4 days ago9 views

CVE-2026-19919

A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit has been made public and cou...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 5 days ago8 views

CVE-2026-19917

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file deletefooditems1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

6.5CVSS0.002EPSS
SaveExploits0References6
NVD
NVD
added 5 days ago10 views

CVE-2026-74764

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract without applying an extraction filter. An attacker able to submit a speciall...

10CVSS0.00405EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago11 views

CVE-2026-73053

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code...

9.4CVSS0.00284EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago8 views

CVE-2026-74767

Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...

8.7CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago14 views

CVE-2026-73052

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu, with Node...

9.4CVSS0.003EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago13 views

CVE-2026-73054

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated...

8.7CVSS0.00313EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago16 views

CVE-2026-73055

Shescape before 2.1.15 and 3.0.0 before 3.0.2 fails to properly escape tilde characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed...

9.3CVSS0.00207EPSS
SaveExploits0References4
NVD
NVD
added 5 days ago11 views

CVE-2026-73050

SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotation marks in the color value, executing arbitrary...

9.4CVSS0.00247EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago12 views

CVE-2026-73042

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitra...

9.4CVSS0.003EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago15 views

CVE-2026-73047

siyuan versions = 3.7.3 fixed in v3.7.4 contain a server-side template injection vulnerability in the attribute-view Template calculation feature introduced in v3.7.0-beta.1. The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and...

8.6CVSS0.00133EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago12 views

CVE-2026-73045

SiYuan before 3.7.4 contains an improper restriction of excessive authentication attempts vulnerability in the authFilePublishAccess endpoint that allows unauthenticated attackers to brute-force per-notebook publish passwords. Attackers can submit unbounded password guesses without rate limiting ...

8.7CVSS0.00302EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago12 views

CVE-2026-73044

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on eve...

9.4CVSS0.00247EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago9 views

CVE-2026-73043

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in...

9.4CVSS0.00372EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago20 views

CVE-2026-73046

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/ surface, accepts the workspace access code Conf.AccessAuthCode as the Basic Auth password but never consults the...

9.8CVSS0.00425EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago10 views

CVE-2026-73041

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js access when a user opens an annotated PDF...

9.4CVSS0.00234EPSS
SaveExploits0References2
NVD
NVD
added 5 days ago9 views

CVE-2026-19916

A vulnerability was detected in code-projects Online Food Order System 1.0. The affected element is an unknown function of the file editfooditems.php. Performing a manipulation of the argument dname results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now...

5.1CVSS0.00199EPSS
SaveExploits0References6
NVD
NVD
added 5 days ago9 views

CVE-2026-18855

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the lldeletelinkfields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, whic...

9.1CVSS0.01206EPSS
SaveExploits0References9
NVD
NVD
added 5 days ago10 views

CVE-2026-19905

A weakness has been identified in Jinher OA 1.0. Impacted is an unknown function of the file /C6/JHSoft.Web.HrmAttendance/attendanceoutapprove.aspx. This manipulation of the argument httpOID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available ...

7.5CVSS0.00254EPSS
SaveExploits0References5
NVD
NVD
added 5 days ago9 views

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

6.3CVSS0.00329EPSS
SaveExploits0References7
NVD
NVD
added 5 days ago9 views

CVE-2026-19904

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The...

4.8CVSS0.0021EPSS
SaveExploits0References6
NVD
NVD
added 5 days ago9 views

CVE-2026-19903

A vulnerability has been found in SourceCodester Online Clothing Store 1.0. This affects an unknown part of the file /db/shopping.sql of the component SQL Database Backup. The manipulation leads to files or directories accessible. Remote exploitation of the attack is possible. The exploit has bee...

6.9CVSS0.00311EPSS
SaveExploits0References6
NVD
NVD
added 5 days ago10 views

CVE-2026-19901

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability ...

9.2CVSS0.00454EPSS
SaveExploits0References5
NVD
NVD
added 5 days ago13 views

CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

9.8CVSS0.00427EPSS
SaveExploits1References2
NVD
NVD
added 5 days ago10 views

CVE-2026-19900

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The...

9.2CVSS0.01793EPSS
SaveExploits0References5
Total number of security vulnerabilities380955