Export limit exceeded: 12915 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 12915 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (12915 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-61946 | 2 Easy-appointments, Wordpress | 2 Easy Appointments, Wordpress | 2026-07-23 | 6.5 Medium |
| Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions. | ||||
| CVE-2026-65456 | 2 Pickplugins, Wordpress | 2 Product Slider For Woocommerce, Wordpress | 2026-07-23 | 4.3 Medium |
| Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions. | ||||
| CVE-2026-9066 | 2 Wordpress, Wpcompress | 2 Wordpress, Wp Compress | 2026-07-23 | 6.1 Medium |
| The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the URLs of JavaScript files emitted on the page, leading to Reflected XSS. When a visitor follows a crafted link, the WP Compress WordPress plugin before 7.10.04's loader injects script elements pointing to an attacker-controlled origin, which lets the attacker execute arbitrary JavaScript in the visitor's session on the target site. | ||||
| CVE-2026-14291 | 2026-07-23 | 7.5 High | ||
| The security-ninja-premium WordPress plugin before 5.290 does not verify the second authentication factor in one of its two-factor authentication code paths, allowing an unauthenticated attacker who knows a user's password to complete authentication without the one-time code and bypass enforced two-factor authentication for any account, including administrators. The affected two-factor module ships only in the premium build. | ||||
| CVE-2026-15017 | 2 Mdjm, Wordpress | 2 Mdjm Event Management, Wordpress | 2026-07-23 | 8.8 High |
| The MDJM Event Management plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.7.8.4. This is due to missing capability checks and nonce verification in the `MDJM_Permissions::set_permissions()` and `MDJM_Employee_Manager::init()` functions, combined with the absence of server-side allow-list validation on the `employee_roles[]` and `new_role` POST parameters before they are passed to `mdjm_set_employee_role()` and `WP_User::set_role()`. This makes it possible for unauthenticated attackers to grant arbitrary MDJM capabilities — including `mdjm_employee` and `mdjm_employee_edit` — to any registered WordPress role, and subsequently leverage a subscriber-level account to escalate privileges to Administrator. `MDJM_Permissions::init()` is registered on the public WordPress `init` hook without any authentication gate, meaning the role-manipulation endpoint is reachable without any prior login. | ||||
| CVE-2026-65470 | 2 Wordpress, Wpmanageninja | 2 Wordpress, Fluent Support | 2026-07-23 | 6.5 Medium |
| Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. | ||||
| CVE-2026-65476 | 2 Uxper, Wordpress | 2 Civi, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. | ||||
| CVE-2026-15011 | 2 Emarket-design, Wordpress | 2 Customer Support Ticket System & Helpdesk, Wordpress | 2026-07-23 | 9.8 Critical |
| The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation. This makes it possible for unauthenticated attackers to invoke arbitrary parameterless PHP functions, which can be used to disrupt site functionality or expose sensitive information. The required nonce is publicly emitted via wp_localize_script whenever the plugin's [emd_form] shortcode is rendered on any public-facing page, making the endpoint reachable by unauthenticated visitors without any prior authentication or privilege. | ||||
| CVE-2026-3482 | 1 Ibm | 2 Sterling B2b Integrator, Sterling File Gateway | 2026-07-23 | 5.3 Medium |
| IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication through a specially crafted HTTP request. | ||||
| CVE-2026-65914 | 1 Cure53 | 1 Dompurify | 2026-07-23 | N/A |
| DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like script, xmp, iframe, noembed, noframes, or noscript. Attackers can craft payloads with closing sequences that break out of the wrapper context during reparsing, reactivating dangerous markup with event handlers to execute JavaScript. | ||||
| CVE-2026-52688 | 1 Powerdns | 1 Recursor | 2026-07-23 | 7.5 High |
| RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation | ||||
| CVE-2026-16489 | 1 Jsforce | 1 Jsforce | 2026-07-23 | 5.3 Medium |
| A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function _execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. The manipulation leads to os command injection. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet. | ||||
| CVE-2026-16723 | 1 Alibaba | 1 Fastjson | 2026-07-23 | 9 Critical |
| A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required. | ||||
| CVE-2026-65589 | 1 N8n | 1 N8n | 2026-07-23 | N/A |
| n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can read exposed header values and credentials that persist in the database and can be exported. | ||||
| CVE-2026-57703 | 2 Sunshinephotocart, Wordpress | 2 Sunshine Photo Cart, Wordpress | 2026-07-23 | 6.3 Medium |
| Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. | ||||
| CVE-2026-12421 | 2026-07-23 | 7.2 High | ||
| The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-7253 | 1 Ibm | 3 Ibm Watson Speech Services Cartridge, Sterling B2b Integrator, Sterling File Gateway | 2026-07-23 | 6 Medium |
| IBM Sterling B2B Integrator and IBM Sterling File Gateway are vulnerable to SQL injection. A privileged user could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. | ||||
| CVE-2026-57769 | 2 Themegoods, Wordpress | 2 Grand Photography, Wordpress | 2026-07-23 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. | ||||
| CVE-2026-59526 | 2 Romancode, Wordpress | 2 Mapsvg, Wordpress | 2026-07-23 | 9.3 Critical |
| Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. | ||||
| CVE-2026-44190 | 1 Redhat | 1 Ansible Automation Platform | 2026-07-23 | 7.8 High |
| A flaw was found in the Ansible Lightspeed Visual Studio Code extension. This Command Injection vulnerability (CWE-78) allows a remote attacker to execute unauthorized commands on a user's system. The issue occurs because the `ansible.python.activationScript` setting, intended for a virtual environment activation script, does not properly validate user input as a file path. If a user opens or executes a specially crafted project, an attacker could exploit this to gain complete control over the user's system with the privileges of the Visual Studio Code application. | ||||