Export limit exceeded: 223866 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 223866 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 223866 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (223866 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-82183 | 1 Wordpress-extensions | 1 Oauth Single Sign On | 2026-11-11 | 8.1 High |
| The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts. | ||||
| CVE-2026-10821 | 1 Wordpress-extensions | 1 Yoast Seo Premium | 2026-11-11 | 6.6 Medium |
| The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level access. This allows such users to inject arbitrary newline-delimited Apache directives into the root .htaccess file. On Apache servers that honour PHP directives, the injection can be chained with the user's own media upload (a polyglot image carrying a PHP payload) and an auto_prepend_file directive to achieve Remote Code Execution. | ||||
| CVE-2026-17563 | 1 Wordpress-extensions | 1 User Frontend | 2026-11-11 | 5.3 Medium |
| The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers. | ||||
| CVE-2026-19698 | 1 Wordpress-extensions | 1 Gutenkit | 2026-11-11 | 3.5 Low |
| The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous visitors. JavaScript execution is not possible at that role, so the impact is limited to defacement, interface redressing and forcing external resources to load. | ||||
| CVE-2026-2688 | 1 Wordpress-extensions | 1 Cm Hipaa Forms | 2026-11-11 | 6.5 Medium |
| The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for this value to skip nonce validation entirely. This allows unauthenticated attackers to access protected AJAX endpoints. | ||||
| CVE-2026-4357 | 1 Wordpress-extensions | 1 Embed Html5 Game | 2026-11-11 | 10 Critical |
| The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites. | ||||
| CVE-2026-77009 | 1 Wordpress-extensions | 1 Watchman Site7 | 2026-11-11 | 9.9 Critical |
| The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server. | ||||
| CVE-2026-78153 | 1 Wordpress-extensions | 1 Restrict User Access | 2026-11-11 | 5.3 Medium |
| The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users. | ||||
| CVE-2026-83533 | 1 Wordpress-extensions | 1 Wp Express Checkout | 2026-11-11 | 5.3 Medium |
| The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying. | ||||
| CVE-2026-83547 | 1 Wordpress-extensions | 1 Xpro Elementor Addons | 2026-11-11 | 6.8 Medium |
| The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2023-3360 | 1 Wordpress-extensions | 1 Weaver Show Posts | 2026-11-11 | 3.3 Low |
| The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog. | ||||
| CVE-2024-3773 | 1 Wordpress-extensions | 1 Livejournal Shortcode | 2026-11-11 | 5.9 Medium |
| The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks | ||||
| CVE-2025-15481 | 1 Wordpress-extensions | 1 Notification Bar For Wordpress | 2026-11-11 | 5.3 Medium |
| The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails. | ||||
| CVE-2025-15485 | 1 Wordpress-extensions | 1 Auto X Line | 2026-11-11 | 8.2 High |
| The Auto x LINE WordPress plugin through 1.0.0 does not have authorization checks in some of its REST endpoints, allowing unauthenticated users to call them and update the plugin settings, clear logs etc | ||||
| CVE-2025-8945 | 1 Wordpress-extensions | 1 Wp Edit Password Protected | 2026-11-11 | 5.3 Medium |
| The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API. | ||||
| CVE-2025-9314 | 1 Wordpress-extensions | 1 Developer Tools | 2026-11-11 | 9.8 Critical |
| The Developer Tools WordPress plugin through 1.1.3 contains an unauthenticated arbitrary file upload vulnerability in the bundled SWFUpload component | ||||
| CVE-2026-125958 | 2026-11-11 | N/A | ||
| Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1. | ||||
| CVE-2026-125883 | 2026-11-11 | N/A | ||
| Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1. | ||||
| CVE-2026-110289 | 2026-11-11 | 5.5 Medium | ||
| A user with the Organization Admin role could point the server or token URL of a Git Sync connection at a loopback or internal address, and Grafana would then send the connection's OAuth client secret and tokens, or requests signed with the GitHub App private key, to that address (server-side request forgery). | ||||
| CVE-2026-124746 | 1 Redhat | 2 Hummingbird, Rhel Els | 2026-11-11 | 5.5 Medium |
| A flaw was found in BusyBox. An integer overflow occurs in the volume_id component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by utilities such as blkid, findfs, or mount, the application crashes, resulting in a Denial of Service (DoS) that prevents the system from resolving or mounting storage devices. | ||||