Export limit exceeded: 424296 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424296 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424296 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424296 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-18946 | 1 Wordpress-extensions | 1 Contact Form To Any Api | 2026-11-11 | 7.5 High |
| The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded through contact forms into a publicly accessible directory, allowing unauthenticated attackers to enumerate and download files submitted by other users. | ||||
| CVE-2026-107509 | 2026-11-11 | 6.5 Medium | ||
| A user with the Viewer role can make Grafana allocate an unbounded amount of memory, and crash it, with a single SQL Expression query that casts a value to a very large BINARY length (memory allocation with excessive size value). | ||||
| CVE-2026-18960 | 1 Wordpress-extensions | 1 Block User Account | 2026-11-11 | 5.4 Medium |
| The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API. | ||||
| CVE-2026-14293 | 1 Wordpress-extensions | 1 Autopay | 2026-11-11 | 8.8 High |
| The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when it is later output on the checkout page, allowing unauthenticated attackers to store JavaScript that executes in the browser of any user, including administrators, who loads the checkout page. | ||||
| CVE-2026-18200 | 1 Wordpress-extensions | 1 Foodboxbooker | 2026-11-11 | 4.3 Medium |
| The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators. | ||||
| CVE-2026-18786 | 1 Wordpress-extensions | 1 Checkview | 2026-11-11 | 8.8 High |
| The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible for unauthenticated attackers to bypass the REST nonce check and perform any REST action available to a logged-in administrator, such as creating a new administrator account, via a crafted link an administrator is tricked into opening. | ||||
| CVE-2026-13612 | 1 Wordpress-extensions | 1 Kivicare | 2026-11-11 | 4.3 Medium |
| The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details. | ||||
| CVE-2026-13613 | 1 Wordpress-extensions | 1 Kivicare | 2026-11-11 | 8.8 High |
| The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection. | ||||
| CVE-2026-14857 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers to alter other users' campaigns. | ||||
| CVE-2026-14858 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store. | ||||
| CVE-2026-14859 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers to create crowdfunding campaign posts despite not being granted that permission. | ||||
| CVE-2026-110992 | 2026-11-11 | 6.5 Medium | ||
| A user who can create Git Sync provisioning jobs (the Editor role by default) could delete or move files outside the configured repository path with a job that references a resource whose source path contains ../ sequences (path traversal). With a local filesystem repository on versions before 13.0.4 and 13.1.1, this reached files on the Grafana host. | ||||
| CVE-2026-14925 | 1 Wordpress-extensions | 1 Import Wp | 2026-11-11 | 7.5 High |
| The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file download handlers, allowing unauthenticated attackers to download export files generated by administrators, which may contain user personal data such as email addresses, login names and roles. Exploitation requires an unconsumed export to already exist and a low-entropy, time-based download key to be obtained. | ||||
| CVE-2026-15039 | 1 Wordpress-extensions | 1 Gift Cards For Woocommerce Pro | 2026-11-11 | 9.8 Critical |
| The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution. | ||||
| CVE-2026-15249 | 1 Wordpress-extensions | 1 Patterns Kit | 2026-11-11 | 5.4 Medium |
| The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts it into the page, allowing users with a role as low as Contributor to store a payload that executes in the browser of a user who views the content and clicks the affected element. | ||||
| CVE-2026-16051 | 1 Wordpress-extensions | 1 Wpmudev-updates | 2026-11-11 | 9.8 Critical |
| The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute arbitrary code (remote code execution). | ||||
| CVE-2026-16253 | 1 Wordpress-extensions | 1 Total Upkeep | 2026-11-11 | 7.5 High |
| The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, allowing them to disclose sensitive backup information and to force a full site restore that overwrites the live site's files and database. This is an incomplete fix of CVE-2020-36848, as the protection added at the time never took effect on distributed copies of the plugin. | ||||
| CVE-2026-16538 | 1 Wordpress-extensions | 1 Wallet For Woocommerce | 2026-11-11 | 9.1 Critical |
| The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value. | ||||
| CVE-2026-19217 | 1 Wordpress-extensions | 1 Royal Elementor Addons | 2026-11-11 | 5.4 Medium |
| The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2026-15045 | 1 Wordpress-extensions | 1 Wallet System For Woocommerce | 2026-11-11 | 6.5 Medium |
| The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own order total, including down to zero, and complete checkout without paying the merchant. | ||||