CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-81156 MEDIUM · 6.8 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen,…
- CVE-2026-81155 MEDIUM · 6.8 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with…
- CVE-2026-81154 MEDIUM · 6.8 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing…
- CVE-2026-81153 MEDIUM · 6.8 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing…
- CVE-2026-14854 HIGH · 7.5 The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX…
- CVE-2026-12980 MEDIUM · 6.8 The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role…
- CVE-2026-108541 MEDIUM · 6.3 A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of…
- CVE-2026-108540 CRITICAL · 9.9 A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer.…
- CVE-2026-107694 LOW · 2.7 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is…
- CVE-2026-107507 LOW · 2.7 The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer…
- CVE-2026-106029 HIGH · 7.5 The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers…
- CVE-2026-104684 LOW · 2.7 The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to…
- CVE-2026-104682 LOW · 2.7 The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post…
- CVE-2026-104681 LOW · 2.7 The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller…
- CVE-2026-104680 HIGH · 7.2 The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before…
- CVE-2026-104028 CRITICAL · 9.8 The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen…
- CVE-2026-103695 HIGH · 8.6 The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to…
- CVE-2026-103694 HIGH · 8.8 The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST…
- CVE-2026-103305 HIGH · 8.8 The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when…
- CVE-2026-108539 MEDIUM · 6.3 A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation…
- CVE-2026-108538 MEDIUM · 6.3 A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component…
- CVE-2026-108523 MEDIUM · 4.3 A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API…
- CVE-2026-108522 HIGH · 8.3 A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing…
- CVE-2026-108521 MEDIUM · 4.7 A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the…
- CVE-2026-108708 HIGH · 8.8 Wukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope checks return all employees.…
- CVE-2026-108707 CRITICAL · 9.8 Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN…
- CVE-2026-108706 MEDIUM · 4.3 eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs without storage…
- CVE-2026-108705 MEDIUM · 4.3 CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint that allows authenticated users to import data into any custom form by…
- CVE-2026-108704 MEDIUM · 4.3 CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to skip permission checks by setting the owner field to their own…
- CVE-2026-108703 MEDIUM · 5.4 CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authenticated users to submit any resource for approval without ownership checks. Low-privileged…
- CVE-2026-108702 MEDIUM · 4.3 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to attacker-supplied URLs. Attackers can…
- CVE-2026-108701 MEDIUM · 4.3 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule handler for POST /contract/sort, which lacks any permission annotation. Authenticated users without…
- CVE-2026-108700 MEDIUM · 6.5 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list business titles by calling POST /field/source/business-title without permission checks. Users…
- CVE-2026-108696 MEDIUM · 4.3 CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated customers to act on other customers' orders by supplying user-controlled ids.…
- CVE-2026-108695 HIGH · 7.1 MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with…
- CVE-2026-108694 MEDIUM · 6.5 ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag.…
- CVE-2026-108693 HIGH · 7.0 ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered.… Imagemagick
- CVE-2026-108692 MEDIUM · 6.5 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission checks. Authenticated users denied module permission…
- CVE-2026-108691 MEDIUM · 5.4 mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in…
- CVE-2026-108690 MEDIUM · 4.3 mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items due to an operator precedence error in…
- CVE-2026-108689 MEDIUM · 5.4 Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary…
- CVE-2026-108688 MEDIUM · 4.3 Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the storage:add permission. Attackers can…
- CVE-2026-104841 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-108680 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid waarmee elke geverifieerde gebruiker sjabloonmeldingen kan verzenden door POST /sys/api/sendTemplateAnnouncement te bellen. Laagbevoorrechte aanvallers kunnen vervalste…
- CVE-2026-108679 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in de sendBusAnnouncement-handler van SystemApiController waarmee elke geverifieerde gebruiker aankondigingen kan verzenden zonder de vereiste machtigingen.…
- CVE-2026-108678 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in de queryUserRoles-handler van SystemApiController waarmee geverifieerde gebruikers de rolcodes van elke gebruiker kunnen lezen. Laagbevoorrechte…
- CVE-2026-108677 MEDIUM · 6.5 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in GET /sys/api/getUserByName waarmee laagbevoorrechte geverifieerde gebruikers de opgeslagen wachtwoordwaarde van elke gebruiker kunnen ophalen. Aanvallers…
- CVE-2026-108676 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in de SysAnnouncementController downLoadFiles-handler waarmee laagbevoorrechte geverifieerde gebruikers aankondigingsbijlagen kunnen downloaden. Aanvallers kunnen een bekende aankondigings-id…
- CVE-2026-108675 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in de SysAnnouncementController editIzTop-handler waarmee laagbevoorrechte geverifieerde gebruikers de status van de aankondigingspincode kunnen wijzigen. Aanvallers…
- CVE-2026-108674 MEDIUM · 4.3 JeecgBoot tot en met 3.9.5 bevat een ontbrekende autorisatiekwetsbaarheid in de OpenApiController queryById-handler waarmee laagbevoorrechte geverifieerde gebruikers OpenAPI-definities kunnen lezen zonder openapi-machtigingen. Aanvallers kunnen GET…