Ausgenutzt, noch nicht im CISA-Katalog
626 ausgenutzte Lücken, noch nicht offiziell
Für diese Schwachstellen gibt es öffentliche Belege einer Ausnutzung, im CISA-Katalog stehen sie noch nicht. Sie tragen keine gesetzliche Frist, sondern Belege. Wo CISA nachzieht, geschieht das im Median 20 Tage später.
-
CVE-2026-84761 Hoch7.2 nicht im CISA-Katalog
LiteSpeed Technologies · LiteSpeed Cache
Server-Side Request Forgery (SSRF) vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Server Side Request Forgery.This issue affects LiteSpeed Cache: from n/a through 7.9.
Quellen: patchstack.com
-
CVE-2026-62031 Kritisch9.3 nicht im CISA-Katalog
Stylemix · uListing
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
Quellen: patchstack.com
-
CVE-2026-61991 Kritisch10.0 nicht im CISA-Katalog
Ajax Load More · AjaxLoadMore Cache
Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.
Quellen: patchstack.com
-
CVE-2026-59514 Kritisch9.3 nicht im CISA-Katalog
MightyNetworks vs BuddyBoss · Buddyboss Platform
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyBoss Buddyboss Platform buddyboss-platform allows Blind SQL Injection.This issue affects Buddyboss Platform: from n/a through 3.0.5.
Quellen: patchstack.com
-
CVE-2026-55559 Kritisch9.8 von Sensoren gesehen nicht im CISA-Katalog
spaceapplications · yamcs
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/{instance} into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The render
Quellen: api.vulncheck.com
-
CVE-2026-54831 Kritisch9.3 nicht im CISA-Katalog
Paolo · GeoDirectory
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Blind SQL Injection.This issue affects GeoDirectory: from n/a through 2.8.162.
Quellen: patchstack.com
-
CVE-2026-39732 Kritisch9.3 nicht im CISA-Katalog
Ivijan-Stefan Stipic · Transliterator
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.
Quellen: patchstack.com
-
CVE-2026-34151 von Sensoren gesehen nicht im CISA-Katalog
XWiki · xwiki
XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix when Jetty 12 or later decodes the request path. The affected lo
Quellen: api.vulncheck.com
-
CVE-2026-13423 Kritisch9.8 nicht im CISA-Katalog
Iqonic Design · Streamit
The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for
Quellen: patchstack.com
-
CVE-2026-126173 nicht im CISA-Katalog
AutomatorWP · AutomatorWP Webhooks
The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in all versions up to, and including, 1.4.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to reset th
Quellen: patchstack.com
-
CVE-2026-118635 Mittel6.5 nicht im CISA-Katalog
paoltaia · GeoDirectory
The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.198 This is due to the software allowing users to execute an action that does not properly validate a va
Quellen: patchstack.com
-
CVE-2026-112359 nicht im CISA-Katalog
Amauri.IO · WPMobile.App
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.
Quellen: patchstack.com
-
CVE-2026-0766 von Sensoren gesehen nicht im CISA-Katalog
openwebui · Open WebUI
Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plugins extension system, in which users granted the relevant permission author Python that the server executes by design, and not a security issue. https://docs.openwebui.com/security/
Quellen: api.vulncheck.com
-
CVE-2024-9441 nicht im CISA-Katalog
Linear · eMerge e3-Series
The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.
Quellen: ess.coalitioninc.com
-
CVE-2023-41662 nicht im CISA-Katalog
ulfbenjaminsson · wp-dtree
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.
Quellen: patchstack.com
-
CVE-2026-95870 nicht im CISA-Katalog
tomdever · wpForo Forum
The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unaut
Quellen: patchstack.com
-
CVE-2026-6514 Hoch7.5 nicht im CISA-Katalog
Infused Addons · InfusedWoo Pro
The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to quer
Quellen: patchstack.com
-
CVE-2026-6510 Kritisch9.8 nicht im CISA-Katalog
Infused Addons · InfusedWoo Pro
The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2. This is due to missing nonce verification and capability checks in the iwar_save_recipe() AJAX handler. This makes it possible for unauthenticated atta
Quellen: patchstack.com
-
CVE-2026-53753 Kritisch9.8 nicht im CISA-Katalog
kidocode · crawl4ai
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) d
Quellen: ess.coalitioninc.com
-
CVE-2026-124218 nicht im CISA-Katalog
addonsorg · Drag and Drop File Upload for Elementor Forms
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the remove_files function in all versions up to, and including, 1.6.2 This makes it possible for unauthenticated attackers to delete arbitrary f
Quellen: patchstack.com
-
CVE-2026-124010 von Sensoren gesehen nicht im CISA-Katalog
Copeland · XWEB EVO
XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands as root by exploiting the setuid-root CGI xwconsole.cgi. Attackers can supply malicious input through the sh parameter, which is passed unsanitized to popen(),
Quellen: api.vulncheck.com · vulncheck.com
-
CVE-2026-112820 nicht im CISA-Katalog
Elated-Themes · Academist Core
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1.
Quellen: patchstack.com
-
CVE-2026-111402 nicht im CISA-Katalog
Tribulant Software · Newsletters
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
Quellen: patchstack.com
-
CVE-2026-110628 nicht im CISA-Katalog
kanbn · Kan
Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services, localho
Quellen: ess.coalitioninc.com
-
CVE-2026-108291 nicht im CISA-Katalog
itthinx · Affiliates
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.
Quellen: patchstack.com
-
CVE-2026-100386 nicht im CISA-Katalog
Themefic · Ultra Addons for Contact Form 7
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.54 via the uacf7_wpcf7_mail_components function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which c
Quellen: patchstack.com
-
CVE-2025-39506 nicht im CISA-Katalog
NasaTheme · Nasa Core
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through <= 6.3.2.
Quellen: patchstack.com
-
CVE-2024-9488 nicht im CISA-Katalog
gvectors · wpdiscuz
The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any exist
Quellen: patchstack.com
-
CVE-2024-58406 nicht im CISA-Katalog
Dalian Huatian Software Co., Ltd. · Huatian Dynamic OA8000
Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in /OAapp/jsp/trace/ntkodownload.jsp, where the filename request parameter is used to locate a file without restricting access to an intended directory or rejecting traversal sequences. Attack
Quellen: cve.org · vulncheck.com
-
CVE-2020-8163 von Sensoren gesehen nicht im CISA-Katalog
rubyonrails · rails
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.
Quellen: api.vulncheck.com
-
CVE-2020-35729 nicht im CISA-Katalog
klogserver · klog_server
KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.
Quellen: ess.coalitioninc.com
-
CVE-2026-96834 Mittel6.5 nicht im CISA-Katalog
Nexcess · GiveWP
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a through 4.16.9.
Quellen: patchstack.com
-
CVE-2026-90436 nicht im CISA-Katalog
Apache · axis
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before
Quellen: previdian.com
-
CVE-2026-82845 Kritisch9.9 nicht im CISA-Katalog
TechMasteriyo · Masteriyo LMS
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS W
Quellen: patchstack.com
-
CVE-2026-62107 Hoch8.8 nicht im CISA-Katalog
Masteriyo · masteriyo
Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.This issue affects Masteriyo - LMS: from n/a through 3.4.0.
Quellen: patchstack.com
-
CVE-2026-57714 nicht im CISA-Katalog
LatePoint · LatePoint
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through <= 5.6.3.
Quellen: patchstack.com
-
CVE-2026-54825 Kritisch9.3 nicht im CISA-Katalog
wpDataTables · wpDataTables
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS wpDataTables wpdatatables allows Blind SQL Injection.This issue affects wpDataTables: from n/a through 7.4.
Quellen: patchstack.com
-
CVE-2026-4348 nicht im CISA-Katalog
betterdocs · BetterDocs Pro
The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0. This is due to the `limit` POST parameter being interpolated directly into a SQL query string before being pass
Quellen: patchstack.com
-
CVE-2026-30849 von Sensoren gesehen nicht im CISA-Katalog
mantisbt · mantisbt
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an improper type checking on the password parameter. Other database backends are not affect
Quellen: api.vulncheck.com
-
CVE-2026-28516 von Sensoren gesehen nicht im CISA-Katalog
opendcim · opendcim
openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitati
Quellen: api.vulncheck.com
-
CVE-2026-17019 Mittel6.1 nicht im CISA-Katalog
Crocoblock · JetEngine
The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user who
Quellen: patchstack.com
-
CVE-2026-13764 nicht im CISA-Katalog
StylemixThemes · Masterstudy - Education WordPress Theme
The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJAX action. This makes it possible for aut
Quellen: patchstack.com
-
CVE-2026-12427 nicht im CISA-Katalog
Repute InfoSystems · ARforms
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'description' parameter in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i
Quellen: patchstack.com
-
CVE-2026-12424 nicht im CISA-Katalog
Repute InfoSystems · ARforms
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Referer Header in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that
Quellen: patchstack.com
-
CVE-2026-124014 von Sensoren gesehen nicht im CISA-Katalog
Copeland · XWEB EVO
XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the system configuration file /etc/xwebconfig.json by sending a crafted POST request to config.lua with action=set, which performs no session validation and writes the r
Quellen: api.vulncheck.com · vulncheck.com
-
CVE-2026-120446 Kritisch9.4 von Sensoren gesehen nicht im CISA-Katalog
madong-code · madong-admin-saas
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data endp
Quellen: api.vulncheck.com
-
CVE-2026-118193 nicht im CISA-Katalog
StellarWP · GiveWP – Donation Plugin and Fundraising Platform
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the `donor_default_user_role` parameter. This is due to the `sanitize_option_donor_default_user_role()` function applying only a narrow li
Quellen: patchstack.com
-
CVE-2025-47541 Hoch7.5 nicht im CISA-Katalog
WPFunnels · Mail Mint
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Team Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through 1.17.7.
Quellen: patchstack.com
-
CVE-2021-25282 von Sensoren gesehen nicht im CISA-Katalog
SaltStack · Salt
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
Quellen: api.vulncheck.com
-
CVE-2020-13925 nicht im CISA-Katalog
Apache · Kylin
Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all pr
Quellen: ess.coalitioninc.com
-
CVE-2026-77807 Hoch7.5 nicht im CISA-Katalog
acyba · AcyMailing
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the conte
Quellen: patchstack.com
-
CVE-2026-66609 Kritisch9.3 nicht im CISA-Katalog
CodexThemes · TheGem (Elementor)
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
Quellen: patchstack.com
-
Microsoft · Windows
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Quellen: securelist.com
-
CVE-2026-48876 Hoch7.1 nicht im CISA-Katalog
Web Guy · Stop Spammers
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.
Quellen: patchstack.com
-
CVE-2026-3496 nicht im CISA-Katalog
Crocoblock · JetBooking
The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f
Quellen: patchstack.com
-
CVE-2026-15983 Hoch8.1 nicht im CISA-Katalog
WebRehab · Super Forms – Drag & Drop Form Builder
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the `super_save_form` AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create
Quellen: patchstack.com
-
CVE-2026-15272 Mittel6.5 nicht im CISA-Katalog
Shamalli · Web 2.0 Directory
The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make
Quellen: patchstack.com
-
CVE-2026-126537 nicht im CISA-Katalog
saturdaydrive · Ninja Forms - File Uploads
The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive exfiltration) in versions up to, and including, 3.3.36. The flaw spans NF_FU_Fields_Upload::process() in includes/fields/upload.php — which returns early
Quellen: patchstack.com
-
CVE-2026-125883 nicht im CISA-Katalog
N-able · N-central
Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1.
Quellen: previdian.com
-
CVE-2026-123488 Kritisch9.8 nicht im CISA-Katalog
craftcms · Craft CMS
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and wr
Quellen: previdian.com
-
CVE-2026-123478 nicht im CISA-Katalog
Meow Apps · AI Engine
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.1.
Quellen: patchstack.com
-
CVE-2026-119529 nicht im CISA-Katalog
RocketGenius · Gravity Forms
The Gravity Forms WordPress plugin before 3.2.2 does not properly restrict the file types that unauthenticated users can upload through its chunked file upload feature, allowing them to read server environment variables and the contents of files within the web root on servers configured to parse Ser
Quellen: patchstack.com
-
CVE-2026-116692 Kritisch9.8 von Sensoren gesehen nicht im CISA-Katalog
MLflow · MLflow
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than requ
Quellen: api.vulncheck.com · previdian.com
-
CVE-2026-116617 nicht im CISA-Katalog
Stylemix · Motors – Car Dealership & Classified Listings
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_options_update`, writes the attacker-controlled `stm_dealer_
Quellen: patchstack.com
-
Drupal · Drupal Core
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
Quellen: api.vulncheck.com
-
CVE-2026-104203 Hoch7.5 von Sensoren gesehen nicht im CISA-Katalog
traccar · traccar
Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and WebServer.java's Jetty ResourceServlet assign different routing meanings to path parameters at /api/media/*. An unauthenticated attacker who knows or guesses a device unique ID and me
Quellen: api.vulncheck.com
-
CVE-2025-13516 nicht im CISA-Katalog
Brainstorm Force · SureMail
The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0. This is due to the plugin's save_file() function in inc/emails/handler/uploads.php which duplicates all email attachments to a web-accessibl
Quellen: patchstack.com
-
CVE-2025-10162 Hoch8.6 von Sensoren gesehen nicht im CISA-Katalog
N-Media · OrderConvo – Vendor & Customer Messages After Orders
The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthenticated users (before version 15.0) and any authenticated user such as a Subscriber (versions 15.0 to 15.1) to read ar
Quellen: api.vulncheck.com
-
CVE-2022-0541 nicht im CISA-Katalog
flothemes · flo-launch
The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.
Quellen: patchstack.com
-
CVE-2020-1337 Ransomware nicht im CISA-Katalog
Microsoft · Windows
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; v
Quellen: securelist.com
-
CVE-2026-89324 nicht im CISA-Katalog
XTemos · Basel Post Types
Quellen: patchstack.com
-
CVE-2026-61949 Kritisch9.3 nicht im CISA-Katalog
Bookly · Bookly
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Blind SQL Injection.This issue affects Bookly: from n/a through 27.7.
Quellen: patchstack.com · cve.org
-
CVE-2026-56070 nicht im CISA-Katalog
ThemeHunk · Advance Product Search
Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.
Quellen: patchstack.com
-
CVE-2026-47668 von Sensoren gesehen nicht im CISA-Katalog
dbgate · dbgate
DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamic
Quellen: api.vulncheck.com
-
CVE-2026-3985 Hoch7.5 nicht im CISA-Katalog
constantcontact · Creative Mail – Easier WordPress & WooCommerce Email Marketing
The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation
Quellen: patchstack.com
-
CVE-2026-27604 von Sensoren gesehen nicht im CISA-Katalog
fossbilling · fossbilling
FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated access to privileged `/api/system/*` endpoints. Because `system` resolves to the cron admin identity,
Quellen: api.vulncheck.com
-
CVE-2026-124490 von Sensoren gesehen nicht im CISA-Katalog
open-emr · openemr
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the file_path parameter. Attackers can use action=download to read credentials and source
Quellen: api.vulncheck.com
-
CVE-2026-124450 von Sensoren gesehen nicht im CISA-Katalog
open-emr · openemr
OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web user
Quellen: api.vulncheck.com
-
CVE-2026-124446 von Sensoren gesehen nicht im CISA-Katalog
open-emr · openemr
OpenEMR before 8.3.0 contains a path traversal vulnerability in the FaxSMS module's RCFaxClient and SignalWireClient disposeDocument functions that allows authenticated low-privilege users to read and overwrite arbitrary files via the unsanitized file_path parameter. Attackers can request action=dow
Quellen: api.vulncheck.com
-
CVE-2026-119714 Mittel6.5 nicht im CISA-Katalog
joedolson · My Calendar - Accessible Event Manager
My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs search parameter. The mcs value reaches mc_search_results() in src/my-calendar-search.php without bracket encoding before d
Quellen: patchstack.com
Warum eine eigene Seite
Daten aus dem Known-Exploited-Vulnerabilities-Katalog der CISA, ein gemeinfreies Werk der US-Regierung. Die genannten Fristen sind für US-Bundesbehörden verbindlich (BOD 22-01); für alle anderen sind sie ein guter Anhaltspunkt für die Priorisierung.
Ausnutzungsdaten: VulnCheck KEV. Der Katalog aktiv ausgenutzter Schwachstellen stammt von CISA.