Export limit exceeded: 371243 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (371243 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-16585 | 2 Wordplus, Wordpress | 2 Better Messages – Chat Rooms, Group Chat, Private Messages & Ai Chat Bots, Wordpress | 2026-07-28 | 7.2 High |
| The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_sticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticated attackers, with administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). The prefix check intended to restrict deletion to the uploads directory can be bypassed by crafting a URL that begins with the legitimate uploads base URL but embeds ../ traversal sequences in the path portion, as the normalize_sticker function only applies esc_url_raw(), which does not strip ../ sequences, allowing the traversal payload to be stored verbatim in WordPress options. | ||||
| CVE-2026-14545 | 2 Truebooker, Wordpress | 2 Truebooker, Wordpress | 2026-07-28 | 9.8 Critical |
| The TrueBooker WordPress plugin before 1.2.4 does not validate account ownership when resetting a user's password through one of its front-end account handlers, allowing unauthenticated attackers to set an arbitrary password on any account, including an administrator, and take over the site. | ||||
| CVE-2026-14924 | 2 Tablesome, Wordpress | 2 Tablesome Table, Wordpress | 2026-07-28 | 7.5 High |
| The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages. | ||||
| CVE-2026-14926 | 2 Fluentcart, Wordpress | 2 A New Era Of Ecommerce, Wordpress | 2026-07-28 | 4.2 Medium |
| The FluentCart A New Era of eCommerce WordPress plugin before 1.4.0 does not verify that a subscription belongs to the requesting customer in several of its payment-method endpoints, allowing any authenticated customer to act on another customer's subscription (changing its payment method, or cancelling and re-binding it) when they know the target subscription identifier. | ||||
| CVE-2026-11756 | 1 Dassault Systèmes | 1 Station Launcher App In 3dexperience Platform | 2026-07-28 | 10 Critical |
| A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution. | ||||
| CVE-2026-55977 | 1 Eshare | 1 Esharepro | 2026-07-28 | 3.3 Low |
| Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen. | ||||
| CVE-2026-8167 | 2 Thewp Digital Solutions, Wordpress | 2 News Theme V8, Wordpress | 2026-07-28 | 6.1 Medium |
| Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in THEWP Digital Solutions News Theme V8 allows Reflected XSS. This issue affects News Theme V8: through 16.06.2026. | ||||
| CVE-2026-44387 | 1 Elecom | 5 Wab-i1750-ps, Wab-m1775-ps, Wab-m2133 and 2 more | 2026-07-28 | N/A |
| ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. | ||||
| CVE-2026-59764 | 1 Elecom | 2 Wrc-x3000gs3-b, Wrc-x3000gs3a-b | 2026-07-28 | N/A |
| ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. | ||||
| CVE-2026-61376 | 1 Elecom | 5 Wab-i1750-ps, Wab-m1775-ps, Wab-m2133 and 2 more | 2026-07-28 | N/A |
| ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in Restore Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product. | ||||
| CVE-2026-9680 | 1 Alibaba | 1 Alibaba Cloud Rds Openapi Mcp Server | 2026-07-28 | 5.8 Medium |
| Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default. | ||||
| CVE-2026-14167 | 2 Ads-tec Industrial It, Ads Tec | 8 Dvg-irf1401, Dvg-irf1421, Dvg-irf3401 and 5 more | 2026-07-28 | 8.8 High |
| A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization. | ||||
| CVE-2026-14168 | 2 Ads-tec Industrial It, Ads Tec | 8 Dvg-irf1401, Dvg-irf1421, Dvg-irf3401 and 5 more | 2026-07-28 | 8.8 High |
| A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access. | ||||
| CVE-2026-14169 | 2 Ads-tec Industrial It, Ads Tec | 8 Dvg-irf1401, Dvg-irf1421, Dvg-irf3401 and 5 more | 2026-07-28 | 8.1 High |
| Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device. | ||||
| CVE-2026-14171 | 2 Ads-tec Industrial It, Ads Tec | 8 Dvg-irf1401, Dvg-irf1421, Dvg-irf3401 and 5 more | 2026-07-28 | 6.1 Medium |
| An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability. | ||||
| CVE-2026-11841 | 1 Sick Ag | 5 Inspectorp61x, Inspectorp62x, Inspectorp63x and 2 more | 2026-07-28 | 9.4 Critical |
| An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment. | ||||
| CVE-2026-10207 | 2 Pickplugins, Wordpress | 2 Pickplugins Question Answer, Wordpress | 2026-07-28 | 7.5 High |
| The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with the use of wp_unslash() which removes WordPress's magic quotes protection, followed by direct concatenation into a SQL query without proper escaping or prepared statements in the qa_user_profile_card() function. This makes it possible for unauthenticated attackers to append additional SQL queries into existing queries, which can be used to extract sensitive information from the database. | ||||
| CVE-2026-14328 | 2 Eazyplugins, Wordpress | 2 Eazy Plugin Manager – Powerful Plugin Management Solution For Wordpress, Wordpress | 2026-07-28 | 8.8 High |
| The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the `wp_ajax_pos_get_option` AJAX handler, which verifies only a nonce that is localized to every logged-in admin-area user via `admin_enqueue_scripts` — without any capability check — before returning the value of any arbitrary WordPress option via `get_option()`, combined with the `admin_login_endpoint_handler` REST endpoint (`GET /wp-json/epm/v1/admin/login`) being registered as publicly accessible and authenticating callers solely by a whirlpool hash of values stored in those same options. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the `site_url`, `connection_key`, and `remote_user_id` values stored in the `eazywp_connecting_info` and `eazywp_connection` options, compute the required `auth_key`, call the `admin/login` REST endpoint to obtain Administrator authentication cookies, and fully take over the site. Exploitation requires the plugin's remote connection feature to have been configured, as the `eazywp_connecting_info` and `eazywp_connection` options must be populated with valid credentials. | ||||
| CVE-2026-11598 | 2 Lrnz, Wordpress | 2 Shortcodify, Wordpress | 2026-07-28 | 5 Medium |
| The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name' Shortcode Attribute in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-14785 | 2 Mihail-chepovskiy, Wordpress | 2 Web Directory Free, Wordpress | 2026-07-28 | 7.5 High |
| The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the 'levels' parameter in all versions up to, and including, 1.7.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | ||||