The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is...
CVE-2026-104022
The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege E
#severity:medium
共收录 5534 条相关情报。
← 返回所有主题The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-93883
The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phon
Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check
## Summary A project member with Write permission can delete an admin-tier link share on that project. The deletion aut
Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2...
## Description ### Summary In Vikunja v2.6.0 the project-permission engine resolves a user's effective permission on a
Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed
## Summary A collaborator removed from a project keeps a **live, automatic feed** of that project's contents, because n
Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants
### Summary In Vikunja v2.6.0 the task position recalculation that runs when a saved filter view is created fails open
Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes
### Summary Vikunja v2.6.0 introduced server-side sessions with revocation semantics: `DELETE /api/v2/user/sessions/{id
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
CVE-2026-107804
## Summary In Nginx UI versions 2.2.0 through 2.5.x, the official bundled reverse-proxy topology did not preserve the e
Shiny for Python has path traversal in bookmark restore
CVE-2026-108258
### Impact Shiny for Python's bookmark-restore path accepted a client-supplied `_state_id_` query-string value and join
Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint
### Summary `TaskAssginee.ReadAll` returns assignee user objects without blanking the `Email` field, disclosing assignee
Vikunja: Cross-project task disclosure through subtask expansion
### Summary Vikunja lets a task in one project have a subtask that lives in a different project. When listing a project'
Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID
### Summary Creating a task relation over CalDAV does not run the `TaskRelation.CanCreate` permission check that the RES
Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabled
CVE-2026-107842
`ModuleSearch` decides whether to filter protected pages out of search results based on the current value of `contao.sea
Contao: The registration module re-sends activation mails
CVE-2026-107843
`ModuleRegistration::compile()` reaches its follow-up registration branch on **any** POST to a page carrying the module.
Contao: Path traversal in the images controller
CVE-2026-107844
`ImagesController` joins the user controlled `{path}` onto the configured image target directory with `Path::join()`, wh
Contao: Improper access control in the preview links module
CVE-2026-107850
`core-bundle/config/services.yaml` registers the preview access voter with the class `Contao\CoreBundle\Security\Voter\D
Contao: Improper access control in the table access voter
CVE-2026-107851
Due to a caching defect in the security voter that governs table-level access to Contao's Data Container (DCA) backend,
Vikunja: Link-share token can enumerate users through the v2 API
CVE-2026-91981
### Summary A link-share token, the credential you hand out to let someone view a shared project, can call the v2 user-s
Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project
CVE-2026-91980
### Summary When you share a project with a team, the API lets you attach any team on the instance, including teams you
Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords
CVE-2026-91973
### Summary The `/dav`, `/.well-known`, and `/feeds` groups are registered on the root Echo instance with only BasicAuth