Export limit exceeded: 425421 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425421 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (425421 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-123698 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve its full settings, including configured secret keys and the hidden login URL. | ||||
| CVE-2026-123699 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 4.8 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running bulk Security For WooCommerce WordPress plugin through 1.0.16, and WordPress core updates, allowing unauthenticated users to force every pending update to be installed on the site. | ||||
| CVE-2026-123700 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 7.5 High |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before running several of its comment cleanup actions, allowing unauthenticated users to permanently delete all comments on the site, including approved ones and WooCommerce order notes. | ||||
| CVE-2026-123701 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not have proper authorization checks when resetting its settings, allowing unauthenticated users to reset any section of its configuration to the defaults and so disable security features such as a custom login URL, two-factor authentication, reCAPTCHA, password policies and the firewall. | ||||
| CVE-2026-123702 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 6.5 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before regenerating the secret keys and salts in the site's configuration file, allowing unauthenticated users to log out every user and, on servers that cannot reach the WordPress.org API, corrupt the configuration file and take the whole site offline. | ||||
| CVE-2026-123703 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not check that the requester is authorised before ending a user's login sessions, allowing unauthenticated visitors to log out any user, including administrators, and to keep them logged out by repeating the request. | ||||
| CVE-2026-123704 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve the email address of every administrator on the site. | ||||
| CVE-2026-123705 | 1 Wordpress-extensions | 1 Security For Woocommerce | 2026-11-12 | 5.3 Medium |
| The Security For WooCommerce WordPress plugin through 1.0.16 does not restrict access to one of its REST API routes, allowing unauthenticated users to retrieve a detailed report of the server, PHP and WordPress configuration, including installed Security For WooCommerce WordPress plugin through 1.0.16 and versions and the site administrator's email address. | ||||
| CVE-2026-12424 | 1 Wordpress-extensions | 1 Arforms | 2026-11-12 | 7.2 High |
| The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Referer Header in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The arf_save_incomplete_form_data() AJAX handler is registered with wp_ajax_nopriv_, meaning unauthenticated attackers can store a malicious payload by submitting a partial form entry with a forged Referer header, with no authentication required at any step. | ||||
| CVE-2026-123659 | 1 Wordpress-extensions | 1 Profilepress | 2026-11-12 | 5.3 Medium |
| The ProfilePress WordPress plugin before 4.17.6 does not restrict the role and user meta filters its member directories accept to those configured by the administrator, allowing unauthenticated users to list accounts a directory was set to hide and to recover user meta values of listed users. | ||||
| CVE-2026-121773 | 2 Generatepress, Wordpress-extensions | 2 Generateblocks, Generateblocks | 2026-11-12 | 6.5 Medium |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GeneratePress GenerateBlocks generateblocks allows Stored XSS.This issue affects GenerateBlocks: from n/a through 2.5.0. | ||||
| CVE-2026-123473 | 2 Wedevs, Wordpress-extensions | 2 Happy Addons For Elementor, Happy Addons For Elementor | 2026-11-12 | 6.5 Medium |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.51.0. | ||||
| CVE-2026-121770 | 2 Villatheme, Wordpress-extensions | 2 Viseek, Viseek | 2026-11-12 | 5.4 Medium |
| Cross-Site Request Forgery (CSRF) vulnerability in VillaTheme VISeek viseek-easy-custom-search allows Cross Site Request Forgery.This issue affects VISeek: from n/a through 1.0.5. | ||||
| CVE-2026-124421 | 2 Bdthemes, Wordpress-extensions | 2 Zoloblocks, Zoloblocks | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in BdThemes ZoloBlocks zoloblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ZoloBlocks: from n/a through 2.8.2. | ||||
| CVE-2026-122096 | 1 Apache Software Foundation | 1 Apache Datasketches Java | 2026-11-12 | N/A |
| Uncontrolled Resource Consumption vulnerability in the sketch deserialization of Apache DataSketches Java. Several deserializers trusted sizes and counts declared in the serialized input. A small crafted input could make an application allocate an excessive amount of memory, leading to an OutOfMemoryError. A crafted string passed to FrequentLongsSketch.getInstance(String) could also make deserialization, or a later update, loop indefinitely. Only applications that deserialize sketches from untrusted sources are affected. This issue affects Apache DataSketches Java: through 9.0.0. Users are recommended to upgrade to version 9.1.0, which fixes the issue. | ||||
| CVE-2026-124261 | 2 Magepeople Inc., Wordpress-extensions | 2 Taxi Booking Manager For Woocommerce, Taxi Booking Manager For Woocommerce | 2026-11-12 | 5.3 Medium |
| Missing Authorization vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Taxi Booking Manager for WooCommerce: from n/a through 2.1.7. | ||||
| CVE-2026-124263 | 2 Plainwaire, Wordpress-extensions | 2 Locatoraid Store Locator, Locatoraid Store Locator | 2026-11-12 | 5.4 Medium |
| Cross-Site Request Forgery (CSRF) vulnerability in plainware Locatoraid Store Locator locatoraid allows Cross Site Request Forgery.This issue affects Locatoraid Store Locator: from n/a through 3.9.75. | ||||
| CVE-2026-122043 | 1 Enterprisedb | 1 Repmgr | 2026-11-12 | N/A |
| repmgr 4.0.0 through 5.5.0 is affected by an OS command injection vulnerability (CWE-78) in event notifications. When event_notification_command is configured, repmgr substitutes the %a (node name), %c (connection string) and %d (details) placeholders into the command and runs it through the shell. %a and %c are inserted without escaping, and %d escapes only double quotes, so shell command substitution still works inside the quoting the documentation recommends. The node name and connection string come from node records in the repmgr.nodes table. An attacker with the credentials of a non-superuser repmgr database user can write a crafted node record and run OS commands, as the operating system user that runs repmgr or repmgrd (usually postgres), on other cluster nodes that process an event using these placeholders. The %a placeholder of failover_validation_command has the same flaw. Deployments whose repmgr database user is a superuser gain no new capability, because a superuser can already run OS commands, and deployments that do not use these placeholders are not affected. The issue is fixed in repmgr 5.5.1. After upgrading, operators must remove any quotes they placed around these placeholders, because a placeholder left inside double quotes is still open to command injection. | ||||
| CVE-2026-106156 | 1 Progress | 1 Telerik Ui For Asp.net Core | 2026-11-12 | 8.6 High |
| In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation requests, with or without grouping, cause dynamic assemblies and load contexts to be retained, resulting in accumulating process memory consumption. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication. Repeated requests can cause memory growth that may exhaust available resources and affect application availability. Disabling grouping in the client-side interface does not prevent direct requests containing these descriptors. The issue is fixed in version `2026.3.1015`. | ||||
| CVE-2026-106137 | 1 Progress | 1 Telerik Ui For Asp.net Mvc | 2026-11-12 | 8.6 High |
| In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a shared class dictionary without exclusive write protection and emits non-collectible dynamic assemblies that remain loaded for the AppDomain's lifetime. The dictionary lookup and insertion are not atomic, and case variations in aggregate descriptors can produce distinct retained types even though member resolution is case-insensitive. An unauthenticated remote attacker can exploit this if the application exposes an aggregation endpoint that is reachable without authentication, by submitting concurrent or repeated crafted requests. These requests may corrupt dictionary state or increase CPU and memory use, potentially degrading availability. The issue is fixed in version `2026.3.1015`. | ||||