The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability...
CVE-2026-94244
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a
#advisory
共收录 23210 条相关情报。
← 返回所有主题An authentication bypass vulnerability exists in the web management interface of Brocade Fabric...
CVE-2026-94585
An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS...
CVE-2026-87664
A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.
An OS command injection vulnerability exists in the account management subsystem of Brocade...
CVE-2026-87677
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates...
CVE-2026-107450
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_li
The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes...
CVE-2026-105193
The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entrop
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify...
CVE-2026-104645
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on severa
An OS command injection vulnerability exists in the REST API management interface of Brocade...
CVE-2026-94581
An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session...
CVE-2026-94579
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines durin
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce...
CVE-2026-103692
The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions availa
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache...
CVE-2026-87661
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data dur
A command injection vulnerability exists in the WebTools administrative interface handling...
CVE-2026-94586
A command injection vulnerability exists in the WebTools administrative interface handling configuration download or fil
A buffer overflow vulnerability exists in the WebTools administrative interface handling...
CVE-2026-94587
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file
An authentication bypass and command injection vulnerability exists in the inter-switch remote...
CVE-2026-87663
An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Broc
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several...
CVE-2026-104646
The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration
The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data...
CVE-2026-105194
The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, al
An authentication logic and privilege escalation vulnerability exists in the account management...
CVE-2026-94576
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fab
The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store...
CVE-2026-103309
The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not esc
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI)...
CVE-2026-94577
A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanis
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a...
CVE-2026-103646
The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is l