Export limit exceeded: 419260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 419260 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (419260 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-106004 | 1 Wordpress-extensions | 1 Dt Lms | 2026-11-04 | 5.3 Medium |
| The DT LMS WordPress plugin through 1.2 does not perform capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to revoke any learner's course and class completion status. | ||||
| CVE-2026-106000 | 2026-11-04 | 5.3 Medium | ||
| The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on calendars configured to require online payment, allowing unauthenticated users to create confirmed bookings without paying. | ||||
| CVE-2026-105993 | 1 Wordpress-extensions | 1 Dt Directory Lite Addon | 2026-11-04 | 5.3 Medium |
| The DT Directory Lite Addon WordPress plugin through 1.1 does not perform nonce or capability checks on its settings handlers, allowing unauthenticated attackers to modify the DT Directory Lite Addon WordPress plugin through 1.1's configuration and skin options. | ||||
| CVE-2026-105981 | 1 Welotec | 3 Tk100, Tk500 V2, Tk500 V3 | 2026-11-04 | 7.2 High |
| Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges. | ||||
| CVE-2026-105967 | 2 Ghozylab, Wordpress-extensions | 2 Gallery For Social Photo, Gallery For Social Photo | 2026-11-04 | 5.8 Medium |
| The Gallery for Social Photo WordPress plugin through 1.0.0.41 does not validate a user-supplied URL before using it to perform a server-side request, allowing unauthenticated attackers to make the server issue requests to arbitrary internal hosts and read the responses. | ||||
| CVE-2026-105413 | 2026-11-04 | 7.5 High | ||
| The Form Maker by 10Web WordPress plugin before 1.15.51 does not consistently escape user-submitted field values before rendering them on its submissions admin page, allowing unauthenticated users to store a payload that executes as arbitrary web scripts in the session of an administrator who views the submissions. | ||||
| CVE-2026-105191 | 2026-11-04 | 4.3 Medium | ||
| The ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce WordPress plugin before 1.17.11 does not perform a capability check on an AJAX action that returns the stored before-and-after values of a record change, allowing any authenticated user, including Subscribers, to read other users' sensitive HR, CRM and Accounting data by enumerating record identifiers. | ||||
| CVE-2026-91168 | 2026-11-04 | 6.8 Medium | ||
| Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. From 0.21.0 until 0.29.0, the Kubernetes request correlator in warpgate-protocol-kubernetes/src/correlator.rs keys an authorized AdmittedTarget by username, target_name, and client IP rather than by the immutable user UUID, while KubernetesSessionHandle::close does not evict the entry. If an account is deleted and a different low-privilege account is created with the same username, the replacement account can successfully authenticate as that recreated username and reuse the predecessor's still-live correlation entry when requesting the same target from the same client IP before kubernetes.session_max_age expires. Current-request authentication still occurs, but the reused entry bypasses a fresh target authorization check and can cause Warpgate to proxy requests with Kubernetes target credentials that the replacement account is not authorized to use, exposing cluster resources or permitting unauthorized mutations. This issue is fixed in version 0.29.0. | ||||
| CVE-2026-104719 | 2026-11-04 | 6.4 Medium | ||
| The CookieYes WordPress plugin before 3.5.8 does not correctly restrict who can write its cookie-category script fields, and does not sanitize or escape them, allowing users with the Contributor role to store JavaScript that executes in the browsers of site visitors and of an administrator reviewing the content. | ||||
| CVE-2026-104648 | 1 Wordpress-extensions | 1 Wemail | 2026-11-04 | 4.9 Medium |
| The weMail WordPress plugin through 2.1.6 does not restrict a site-wide third-party email-service API key to administrators, exposing it in an admin screen that users with the Editor role can reach by default, which allows them to obtain a reusable credential usable without a WordPress session to impersonate other users and sever the site's email-service connection. | ||||
| CVE-2026-104647 | 1 Wordpress-extensions | 1 Wemail | 2026-11-04 | 3.8 Low |
| The weMail WordPress plugin through 2.1.6 does not correctly verify user capabilities in its REST API permission checks, treating any user whose role is in the weMail WordPress plugin through 2.1.6's allowed-roles list (Editor and above by default) as authorised for every action, which allows such users to perform administrator-level actions including enumerating all registered users with their email addresses and modifying the weMail WordPress plugin through 2.1.6's own access-control configuration. | ||||
| CVE-2026-103379 | 1 Wordpress-extensions | 1 Wati Chat And Notification | 2026-11-04 | 5.3 Medium |
| The WATI Chat and Notification WordPress plugin through 1.1.8 does not require a valid, non-empty secret on a public endpoint that returns its stored API token, which an unauthenticated attacker can then present to a second public endpoint to obtain the order-received URL of any WooCommerce order and read the customer's name, address, phone number and email address. The endpoints are reachable in the WATI Chat and Notification WordPress plugin through 1.1.8's default state and are closed only once a WATI account is connected. | ||||
| CVE-2026-102787 | 1 Phoca | 1 Phoca Download Extension For Joomla | 2026-11-04 | N/A |
| Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 | ||||
| CVE-2026-101166 | 2026-11-04 | 3.7 Low | ||
| The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify a product's publication status before creating an order for it through its PayPal express-checkout endpoint, allowing unauthenticated users to order draft or unpublished products. | ||||
| CVE-2026-101165 | 2026-11-04 | 3.7 Low | ||
| The Mollie Payments for WooCommerce WordPress plugin before 8.2.0 does not verify an order's payment state or the requested payment gateway before removing a configured payment-surcharge fee, allowing unauthenticated users to reduce an order's total before completing payment. | ||||
| CVE-2026-122032 | 2026-11-04 | 6.5 Medium | ||
| SPIP before 4.4.29 contains a SQL injection vulnerability that allows authenticated attackers with back-office access to inject arbitrary SQL by submitting a differing where parameter value in the POST body versus the GET query string on the /ecrire/?exec=articles endpoint, bypassing spip_sanitize_from_request() sanitization. Attackers can exploit this request parameter mismatch to extract database contents, including protected articles and bcrypt password hashes of users. | ||||
| CVE-2026-34909 | 2 Ubiquiti, Ui | 94 Efg, Envr, Envr-core and 91 more | 2026-11-04 | 10 Critical |
| A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account. | ||||
| CVE-2026-87544 | 1 Google | 1 Chrome | 2026-11-04 | 8.8 High |
| Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-113236 | 2 Apple, Google | 2 Iphone Os, Chrome | 2026-11-04 | 8.8 High |
| Improper input validation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) | ||||
| CVE-2026-113238 | 1 Google | 2 Android, Chrome | 2026-11-04 | 8.8 High |
| Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||