CVEs
Browse the synced catalog, newest first.
- CVE-2026-123088UniPAY Payment Gateway For WooCommerce < 2.4 - Unauthenticated Order Key and Customer PII DisclosureUniPAY Payment Gateway For WooCommerce
- CVE-2026-123064WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege EscalationWP BASE Booking of Appointments, Services and Events
- CVE-2026-121875Post Duplicator < 3.0.18 - Admin+ Privilege Escalation via Unvalidated Capability AssignmentPost Duplicator
- CVE-2026-121874Post Duplicator < 3.0.18 - Admin+ Arbitrary Option Update via Unvalidated Option NamePost Duplicator
- CVE-2026-121759Fusion Page Builder < 1.7.1 - Contributor+ Arbitrary Post Trashing via IDORFusion Page Builder
- CVE-2026-120409All-in-One Video Gallery < 5.1.1 - Unauthenticated Password-Protected Video Disclosure via Player Page and Download HandlerAll-in-One Video Gallery
- CVE-2026-118202Limit Login Attempts Reloaded < 3.4.1 - Two-Factor Authentication Bypass via Malformed X-Forwarded-For HeaderLimit Login Attempts Security
- CVE-2026-118201Limit Login Attempts Reloaded 3.0.0 - 3.4.0 - Two-Factor Authentication Bypass via XML-RPCLimit Login Attempts Security
- CVE-2026-115256Mail Debug for WooCommerce <= 1.3.0 - Unauthenticated Sent Email Disclosure Leading to Account TakeoverMail Debug for WooCommerce
- CVE-2026-115237Grand Job <= 1.2.1 - Unauthenticated Account Takeover via Empty Password Reset CodeGrand Job
- CVE-2026-115213EASY-JS-WPAPI <= 2.0 - Unauthenticated Administrator Password Disclosure and Authentication BypassEASY-JS-WPAPI Client HANDLE for the WordPress REST-API
- CVE-2026-115212mView <= 1.0.3 - Subscriber+ Arbitrary File UploadmView 豆瓣电影
- CVE-2026-115204AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_importAZEXO Store Locator
- CVE-2026-124571SourceCodester Simple CRUD using PHP and FPDF register.php sql injectionSourceCodester Simple CRUD using PHP and FPDF
- CVE-2026-124570SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scriptingSourceCodester Online Leave Management System
- CVE-2026-124569fushengqian fuintCatering CommissionCashServiceImpl.java updateCommissionCash access controlfushengqian fuintCatering
- CVE-2026-124568fushengqian fuintCatering Refund Agreement RefundServiceImpl.agreeRefund access controlfushengqian fuintCatering
- CVE-2026-124567fushengqian fuint ClientOrderController.java receipt state issuefushengqian fuint
- CVE-2026-124566fushengqian fuint Alipay Callback ClientPayController.java aliPayCallback behavioral workflowfushengqian fuint
- CVE-2026-124565fushengqian fuint Order Verification MerchantOrderController.java confirm access controlfushengqian fuint
- CVE-2026-113364Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through…NEC WebSAM WinShare
- CVE-2026-113363Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0…NEC WebSAM WinShare
- CVE-2026-113362Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3)…NEC WebSAM WinShare
- CVE-2026-124564D-Link DIR-878 HNAP prog.cgi GetListDirectory path traversalD-Link DIR-878
- CVE-2026-124563D-Link DIR-878 HNAP SetWanSettings buffer overflowD-Link DIR-878
- CVE-2026-124562D-Link DIR-878 HNAP SetWanSettings buffer overflowD-Link DIR-878
- CVE-2026-124561D-Link DIR-878 HNAP prog.cgi SetVLANSettings stack-based overflowD-Link DIR-878
- CVE-2026-124560D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflowD-Link DIR-878
- CVE-2026-121825Open redirect in the Liberty ID-FF service provider single sign-on flowOpenAM
- CVE-2026-124558DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgeryDataLinkDC Dinky