Lucene search
+L
VulnrichmentRecent

174844 matches found

Vulnrichment
Vulnrichment
•added 2026/08/15 6:00 a.m.•9 views

CVE-2026-16611 Product Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration Disclosure

The Product Feed PRO for WooCommerce by AdTribes WordPress plugin before 13.5.7 does not perform an authorization check on one of its REST read routes, allowing unauthenticated users to disclose a store's feed configuration rules, filters and field mapping and to enumerate the full product catego...

5.2AI score0.00256EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/15 6:00 a.m.•8 views

CVE-2026-16541 Simply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST Endpoints

The Simply Schedule Appointments WordPress plugin before 1.6.12.17 does not restrict the user records returned by some of its REST endpoints to those the requester is entitled to see, allowing users with a low-privileged staff role to disclose the names and email addresses of arbitrary registered...

5.3AI score0.00219EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/15 6:00 a.m.•9 views

CVE-2026-18216 Backup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login

The Backup Migration WordPress plugin before 2.1.7 does not properly restrict a post-restore automatic login mechanism, allowing a user who administers one site of a multisite network to obtain a long-lived authenticated session as an administrator of another site in the same network, without...

5.2AI score0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/15 5:21 a.m.•5 views

CVE-2026-16007 Authenticated SQL Injection in AppFlowy

AppFlowy's qcuiknote feature is affected by a SQL injection vulnerability. Authenticated users with access to the feature can inject arbitrary SQL to exfiltrate data in the underlying SQL database...

7.1CVSS5.9AI score0.00203EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•5 views

CVE-2026-13360 Cookie Banner for GDPR / CCPA <= 4.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'regionArray' Parameter

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regionArray' parameter in all versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.5AI score0.00247EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•4 views

CVE-2026-16145 Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated Stored Cross-Site Scripting via 'action' Parameter

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 5.1 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.5AI score0.00266EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•9 views

CVE-2026-16094 Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter

The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all versions up to, and including, 5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

4.9CVSS5.9AI score0.00346EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•8 views

CVE-2026-15948 Hydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' Parameter

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'firstname' parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.6AI score0.0021EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•9 views

CVE-2026-17090 Beaver Builder Page Builder <= 2.10.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via Button Module 'button' Parameter

The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Button Module 'button' Button Code Setting in all versions up to, and including, 2.10.2.2 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.5AI score0.00235EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•6 views

CVE-2026-16586 Contest Gallery <= 30.0.6 - Authenticated (Author+) Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cg_multiple_files_for_post' -> 'cgRealId'

The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Second-Order SQL Injection via MultipleFiles Second-Order Payload via 'cgmultiplefilesforpost' - 'cgRealId' in all versions up to, and including, 30.0.7 due to insufficient escaping ...

6.5CVSS5.8AI score0.00328EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2026/08/15 3:25 a.m.•7 views

CVE-2026-18387 Groundhogg <= 4.5.14 - Authenticated (Vendor+) SQL Injection via 'tag_query' Parameter

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'tagquery' parameter in all versions up to, and including, 4.5.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

6.5CVSS6.1AI score0.00392EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•4 views

CVE-2026-12128 Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter

The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to Price Manipulation via the cartdata parameter in all versions up to, and including, 2.9.9.6.8. This is due to the dopbspwoocommerceaddtocart AJAX action being registered via wpajaxnopriv with no authentication, no nonce...

5.3CVSS5.6AI score0.00348EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•7 views

CVE-2026-15001 bLoyal: Loyalty & Promotions by bLoyal <= 3.1.611.78 - Authenticated (Subscriber+) Privilege Escalation via Unprotected AJAX API URL Settings

The bLoyal: Loyalty & Promotions by bLoyal plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.1.611.78. This is due to the AJAX actions savebloyalconfigurationdata and savebloyalaccesskeyverificationdata being registered without any capability or...

8.8CVSS5.2AI score0.0039EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•7 views

CVE-2026-15965 MaxUpload <= 1.4.0 - Unauthenticated Arbitrary File Upload via 'resumableFilename' Parameter

The MaxUpload – Big File Uploads – Increase Maximum File Upload Size plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.4.0 via the handleupload function. This is due to a filename-validation mismatch in the handleupload function where extension an...

8.8CVSS6.3AI score0.0058EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•7 views

CVE-2026-15162 Object Sync for Salesforce <= 2.2.13 - Unauthenticated SQL Injection

The Object Sync for Salesforce plugin is vulnerable to unauthenticated SQL Injection via the wordpressobjecttype parameter of its /wp-json/object-sync-for-salesforce/push/ REST route. The route's permission callback canprocess checks only the HTTP method for the push class — no capability or nonc...

7.5CVSS6.1AI score0.00343EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•7 views

CVE-2026-16080 Image Uploader for Welcart <= 1.4.6 - Authenticated (Author+) SQL Injection via Attachment 'post_title' Parameter

The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

6.5CVSS5.8AI score0.00249EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•6 views

CVE-2026-15312 Propovoice: All-in-One Client Management System <= 1.7.8 - Authenticated (ndpv_manager+) Privilege Escalation via 'role' Parameter

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8. This is due to the create function's REST endpoint failing to validate the user-supplied role parameter against an allowlist of permitted...

8.8CVSS5.3AI score0.00283EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/15 2:26 a.m.•3 views

CVE-2026-14433 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'businessid' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS5.5AI score0.00236EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/14 10:53 p.m.•5 views

CVE-2026-74250

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...

6.3CVSS5.2AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 10:43 p.m.•4 views

CVE-2026-74247 Quay: ssrf via build archive_url in quay build api

A flaw was found in Red Hat Quay. A user with FEATUREBUILDSUPPORT enabled and repository write access can exploit a Server-Side Request Forgery SSRF vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network...

4.2CVSS5.3AI score0.00145EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 10:43 p.m.•3 views

CVE-2026-74243 Quay: unauthenticated secscan notification endpoint in quay when psk is unset

A flaw was found in Red Hat Quay. When the SECURITYSCANNERV4PSK pre-shared key is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Cla...

6.5CVSS5.5AI score0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 10:43 p.m.•6 views

CVE-2026-74242 Quay: repository notification uuid idor in quay api

A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...

5.3CVSS5.4AI score0.00259EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 10:43 p.m.•3 views

CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

5.4CVSS5.3AI score0.00173EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 10:13 p.m.•7 views

CVE-2026-63650

OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...

2CVSS5.3AI score0.00364EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 10:13 p.m.•7 views

CVE-2026-63649

The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...

4.1CVSS5.4AI score0.00329EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/14 9:50 p.m.•6 views

CVE-2026-69414 Microsoft Defender Elevation of Privilege Vulnerability

...

7.8CVSS5.6AI score0.00227EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/08/14 9:32 p.m.•9 views

CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...

9.2CVSS5.2AI score0.00441EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/14 9:06 p.m.•7 views

CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling

Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...

8.8CVSS6.7AI score0.0156EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/14 9:05 p.m.•7 views

CVE-2026-50523 Microsoft PowerShell Remote Code Execution Vulnerability

...

7.8CVSS5.2AI score0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:20 p.m.•7 views

CVE-2026-74248

OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected...

4.3CVSS5.2AI score0.0019EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/14 8:08 p.m.•11 views

CVE-2026-67366 Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11

Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check...

5.3CVSS5.2AI score0.00151EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:08 p.m.•7 views

CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11

Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration 2.0.0-4.0.11 - A backend operator granted access scoped to comicagenda only could enumerate Joomla user profiles...

5.1CVSS5.4AI score0.00243EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:06 p.m.•7 views

CVE-2026-71571 Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11

Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL...

8.6CVSS5.7AI score0.00218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:02 p.m.•6 views

CVE-2026-67365 Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda 4.0.0-4.0.11 - Unauthenticated SQL injection in modicagendacalendar iCagenda, reachable via comajax with no session, token or account...

9.2CVSS5.6AI score0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:01 p.m.•7 views

CVE-2026-19910 PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability

PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...

7.5CVSS7.4AI score0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:00 p.m.•8 views

CVE-2026-19908 PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The...

7.1CVSS6.4AI score0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 8:00 p.m.•6 views

CVE-2026-19909 PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...

7.5CVSS7.4AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:32 p.m.•9 views

CVE-2026-34492 Airwall - Arbitrary file read

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...

7CVSS5.3AI score0.00428EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:28 p.m.•17 views

CVE-2026-64887 Airwall - Hardcoded Secrets

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1...

7CVSS5.3AI score0.00158EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:23 p.m.•7 views

CVE-2026-18554 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

7.5CVSS5.3AI score0.00854EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:23 p.m.•5 views

CVE-2026-18178 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...

5.4CVSS5.5AI score0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:23 p.m.•3 views

CVE-2026-17227 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...

5.4CVSS5.8AI score0.00347EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:22 p.m.•6 views

CVE-2026-17209 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting...

6.3CVSS5.2AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:22 p.m.•5 views

CVE-2026-17184 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

9.8CVSS6AI score0.00795EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:21 p.m.•8 views

CVE-2026-27871 TL280

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...

6.3CVSS5.2AI score0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:21 p.m.•6 views

CVE-2026-17181 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal...

9.3CVSS5.5AI score0.00548EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:20 p.m.•6 views

CVE-2026-17179 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection...

8.5CVSS5.4AI score0.03108EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:20 p.m.•9 views

CVE-2026-17175 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...

7.5CVSS5.3AI score0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:19 p.m.•3 views

CVE-2026-17173 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths...

6.5CVSS5.3AI score0.00655EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/14 7:19 p.m.•3 views

CVE-2026-17081 IBM Db2 Mirror for i is affected by multiple vulnerabilities

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...

8.2CVSS5.5AI score0.00548EPSS
SaveExploits0References1
Total number of security vulnerabilities174844