IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive...
CVE-2026-115998
IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept
#severity:medium
共收录 5506 条相关情报。
← 返回所有主题Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows...
CVE-2026-114705
Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Con
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114194
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inser
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta...
CVE-2026-115993
Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker t
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE-2026-114693
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs Al
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache...
CVE-2026-114190
Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespee
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before...
CVE-2026-108013
BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust cer
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting...
CVE-2026-110892
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Acces
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour...
CVE-2026-114429
The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before st
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or...
CVE-2026-97353
The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability...
CVE-2026-97352
The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX a
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a...
CVE-2026-87835
The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when re
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password...
CVE-2026-113492
The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading lis
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check...
CVE-2026-113490
The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listin
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment...
CVE-2026-113489
The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing be
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL...
CVE-2026-113491
The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map...
CVE-2026-113493
The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes befo
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a...
CVE-2026-105199
The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its A
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or...
CVE-2026-107887
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the actio
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check...
CVE-2026-107907
The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front