The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77008
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not have any authorisation or
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its...
CVE-2026-76546
The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, al
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not...
CVE-2026-77010
The HEL Online Classroom: AI-powered Online Classrooms WordPress plugin through 1.0.3 does not perform authorisation che
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its...
CVE-2026-19430
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and th
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of...
CVE-2026-18233
The MStore API WordPress plugin before 4.21.1 does not verify that the order targeted by one of its delivery endpoints
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape...
CVE-2026-80488
The WP Ultimate CSV Importer WordPress plugin before 9.0 does not properly sanitise and escape imported field values be
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect...
CVE-2026-81342
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.43 does not validate a redirect parameter supplied dur
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount,...
CVE-2026-81026
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or s
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when...
CVE-2026-17522
The Newsletters WordPress plugin before 4.17 does not perform any nonce or capability check when saving one of its setti
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently...
CVE-2026-17520
The Newsletters WordPress plugin before 4.17 does not generate its API key using a sufficiently random source, deriving
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of...
CVE-2026-3686
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limi
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when...
CVE-2026-76651
A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76650
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue...
CVE-2026-81533
An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL state
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass...
CVE-2026-82018
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the G
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when...
CVE-2026-76649
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action request
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and...
CVE-2026-19294
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This...
CVE-2026-18545
IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions...
CVE-2025-64649
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle te
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic...
CVE-2025-36271
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could a