A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads ...

CVE-2026-108578

A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of th

历史摘要 · 未重新核验 · NVD

The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated user, such as a Subscriber, to retr...

CVE-2026-97183

The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allow

历史摘要 · 未重新核验 · NVD

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext pa

历史摘要 · 未重新核验 · NVD

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is th...

CVE-2026-107694

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that t

历史摘要 · 未重新核验 · NVD

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allo...

CVE-2026-104681

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to

历史摘要 · 未重新核验 · NVD

The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.4.3 via the wpbc_is_show_popover_in_flex_timel...

CVE-2026-18496

The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc

历史摘要 · 未重新核验 · NVD

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose oth...

CVE-2026-105995

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reserva

历史摘要 · 未重新核验 · NVD

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauth...

CVE-2026-105990

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks

历史摘要 · 未重新核验 · NVD

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes...

CVE-2026-103964

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc

历史摘要 · 未重新核验 · NVD

The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the...

CVE-2026-103365

The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Informatio

历史摘要 · 未重新核验 · NVD

Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint

### Summary `TaskAssginee.ReadAll` returns assignee user objects without blanking the `Email` field, disclosing assignee

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Cross-project task disclosure through subtask expansion

### Summary Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project'

历史摘要 · 未重新核验 · GitHub Advisory

Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled

CVE-2026-107842

`ModuleSearch` decides whether to filter protected pages out of search results based on the current value of `contao.sea

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Link-share token can enumerate users through the v2 API

CVE-2026-91981

### Summary A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-s

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

CVE-2026-91980

### Summary When you share a project with a team, the API lets you attach any team on the instance, including teams you

历史摘要 · 未重新核验 · GitHub Advisory

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

CVE-2026-91985

## Summary A user who has only read permission on a project can call the single link-share read endpoint and receive th

历史摘要 · 未重新核验 · GitHub Advisory

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page titles, URLs, and indexed context snippets to unauthenticated ...

CVE-2026-107842

Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page title

历史摘要 · 未重新核验 · NVD

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

CVE-2026-107811

Summary 0xJacky/nginx-ui contains a high-severity trust-boundary failure between ordinary users and cluster node credent

历史摘要 · 未重新核验 · GitHub Advisory

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses seriali...

CVE-2026-107811

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can acce

历史摘要 · 未重新核验 · NVD

0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser

CVE-2026-107811

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can acce

历史摘要 · 未重新核验 · OSV.dev