Sfruttate, non ancora nel catalogo CISA
626 falle sfruttate e non ancora ufficiali
Queste vulnerabilità hanno prove pubbliche di sfruttamento ma non sono ancora nel catalogo CISA. Non hanno una scadenza di legge: hanno delle prove. Dove CISA arriva, lo fa in media 20 giorni dopo.
-
CVE-2026-84761 Alta7.2 non nel catalogo CISA
LiteSpeed Technologies · LiteSpeed Cache
Server-Side Request Forgery (SSRF) vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Server Side Request Forgery.This issue affects LiteSpeed Cache: from n/a through 7.9.
Fonti: patchstack.com
-
CVE-2026-62031 Critica9.3 non nel catalogo CISA
Stylemix · uListing
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
Fonti: patchstack.com
-
CVE-2026-61991 Critica10.0 non nel catalogo CISA
Ajax Load More · AjaxLoadMore Cache
Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.
Fonti: patchstack.com
-
CVE-2026-59514 Critica9.3 non nel catalogo CISA
MightyNetworks vs BuddyBoss · Buddyboss Platform
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyBoss Buddyboss Platform buddyboss-platform allows Blind SQL Injection.This issue affects Buddyboss Platform: from n/a through 3.0.5.
Fonti: patchstack.com
-
CVE-2026-55559 Critica9.8 rilevata dai sensori non nel catalogo CISA
spaceapplications · yamcs
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs inserts templateArgs from POST /api/instances and PATCH /api/instances/{instance} into YAML through VarStatement.append in yamcs-core/src/main/java/org/yamcs/templating/VarStatement.java without YAML-context escaping. The render
Fonti: api.vulncheck.com
-
CVE-2026-54831 Critica9.3 non nel catalogo CISA
Paolo · GeoDirectory
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode Ltd GeoDirectory geodirectory allows Blind SQL Injection.This issue affects GeoDirectory: from n/a through 2.8.162.
Fonti: patchstack.com
-
CVE-2026-39732 Critica9.3 non nel catalogo CISA
Ivijan-Stefan Stipic · Transliterator
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.
Fonti: patchstack.com
-
CVE-2026-34151 rilevata dai sensori non nel catalogo CISA
XWiki · xwiki
XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve double-encoded parent-directory segments outside the intended skin or web-application resource prefix when Jetty 12 or later decodes the request path. The affected lo
Fonti: api.vulncheck.com
-
CVE-2026-13423 Critica9.8 non nel catalogo CISA
Iqonic Design · Streamit
The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for
Fonti: patchstack.com
-
CVE-2026-126173 non nel catalogo CISA
AutomatorWP · AutomatorWP Webhooks
The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in all versions up to, and including, 1.4.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to reset th
Fonti: patchstack.com
-
CVE-2026-118635 Media6.5 non nel catalogo CISA
paoltaia · GeoDirectory
The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.8.198 This is due to the software allowing users to execute an action that does not properly validate a va
Fonti: patchstack.com
-
CVE-2026-112359 non nel catalogo CISA
Amauri.IO · WPMobile.App
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: from n/a through 11.86.
Fonti: patchstack.com
-
CVE-2026-0766 rilevata dai sensori non nel catalogo CISA
openwebui · Open WebUI
Rejected reason: Open WebU's investigation further investigation showed that this is intended functionality of the Plugins extension system, in which users granted the relevant permission author Python that the server executes by design, and not a security issue. https://docs.openwebui.com/security/
Fonti: api.vulncheck.com
-
CVE-2024-9441 non nel catalogo CISA
Linear · eMerge e3-Series
The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.
Fonti: ess.coalitioninc.com
-
CVE-2023-41662 non nel catalogo CISA
ulfbenjaminsson · wp-dtree
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.
Fonti: patchstack.com
-
CVE-2026-95870 non nel catalogo CISA
tomdever · wpForo Forum
The wpForo Forum plugin for WordPress is vulnerable to generic SQL Injection via the 'data' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unaut
Fonti: patchstack.com
-
CVE-2026-6514 Alta7.5 non nel catalogo CISA
Infused Addons · InfusedWoo Pro
The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to quer
Fonti: patchstack.com
-
CVE-2026-6510 Critica9.8 non nel catalogo CISA
Infused Addons · InfusedWoo Pro
The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2. This is due to missing nonce verification and capability checks in the iwar_save_recipe() AJAX handler. This makes it possible for unauthenticated atta
Fonti: patchstack.com
-
CVE-2026-53753 Critica9.8 non nel catalogo CISA
kidocode · crawl4ai
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.7, the _safe_eval_expression() function in the computed fields feature uses an AST validator that only blocks attributes starting with underscore. Python generator and frame object attributes (gi_frame, f_back, f_builtins) d
Fonti: ess.coalitioninc.com
-
CVE-2026-124218 non nel catalogo CISA
addonsorg · Drag and Drop File Upload for Elementor Forms
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the remove_files function in all versions up to, and including, 1.6.2 This makes it possible for unauthenticated attackers to delete arbitrary f
Fonti: patchstack.com
-
CVE-2026-124010 rilevata dai sensori non nel catalogo CISA
Copeland · XWEB EVO
XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands as root by exploiting the setuid-root CGI xwconsole.cgi. Attackers can supply malicious input through the sh parameter, which is passed unsanitized to popen(),
Fonti: api.vulncheck.com · vulncheck.com
-
CVE-2026-112820 non nel catalogo CISA
Elated-Themes · Academist Core
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1.
Fonti: patchstack.com
-
CVE-2026-111402 non nel catalogo CISA
Tribulant Software · Newsletters
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issue affects Newsletters: from n/a through 4.18.1.
Fonti: patchstack.com
-
CVE-2026-110628 non nel catalogo CISA
kanbn · Kan
Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. When S3_ENDPOINT is unset, attackers can pass arbitrary url query parameters to fetch() to read internal services, localho
Fonti: ess.coalitioninc.com
-
CVE-2026-108291 non nel catalogo CISA
itthinx · Affiliates
Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.
Fonti: patchstack.com
-
CVE-2026-100386 non nel catalogo CISA
Themefic · Ultra Addons for Contact Form 7
The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.5.54 via the uacf7_wpcf7_mail_components function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which c
Fonti: patchstack.com
-
CVE-2025-39506 non nel catalogo CISA
NasaTheme · Nasa Core
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/a through <= 6.3.2.
Fonti: patchstack.com
-
CVE-2024-9488 non nel catalogo CISA
gvectors · wpdiscuz
The Comments – wpDiscuz plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.6.24. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any exist
Fonti: patchstack.com
-
CVE-2024-58406 non nel catalogo CISA
Dalian Huatian Software Co., Ltd. · Huatian Dynamic OA8000
Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in /OAapp/jsp/trace/ntkodownload.jsp, where the filename request parameter is used to locate a file without restricting access to an intended directory or rejecting traversal sequences. Attack
Fonti: cve.org · vulncheck.com
-
CVE-2020-8163 rilevata dai sensori non nel catalogo CISA
rubyonrails · rails
The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.
Fonti: api.vulncheck.com
-
CVE-2020-35729 non nel catalogo CISA
klogserver · klog_server
KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.
Fonti: ess.coalitioninc.com
-
CVE-2026-96834 Media6.5 non nel catalogo CISA
Nexcess · GiveWP
Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a through 4.16.9.
Fonti: patchstack.com
-
CVE-2026-90436 non nel catalogo CISA
Apache · axis
** UNSUPPORTED WHEN ASSIGNED ** Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated remote class instantiation. When a SOAP carries a element, Axis loads the named class and, if a String element is also present, instantiates it through its String constructor before
Fonti: previdian.com
-
CVE-2026-82845 Critica9.9 non nel catalogo CISA
TechMasteriyo · Masteriyo LMS
The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS W
Fonti: patchstack.com
-
CVE-2026-62107 Alta8.8 non nel catalogo CISA
Masteriyo · masteriyo
Deserialization of Untrusted Data vulnerability in ThemeGrill Masteriyo - LMS learning-management-system allows Object Injection.This issue affects Masteriyo - LMS: from n/a through 3.4.0.
Fonti: patchstack.com
-
CVE-2026-57714 non nel catalogo CISA
LatePoint · LatePoint
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through <= 5.6.3.
Fonti: patchstack.com
-
CVE-2026-54825 Critica9.3 non nel catalogo CISA
wpDataTables · wpDataTables
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS wpDataTables wpdatatables allows Blind SQL Injection.This issue affects wpDataTables: from n/a through 7.4.
Fonti: patchstack.com
-
CVE-2026-4348 non nel catalogo CISA
betterdocs · BetterDocs Pro
The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the `get_current_letter_docs` and `docs_sort_by_letter` AJAX actions in all versions up to, and including, 3.7.0. This is due to the `limit` POST parameter being interpolated directly into a SQL query string before being pass
Fonti: patchstack.com
-
CVE-2026-30849 rilevata dai sensori non nel catalogo CISA
mantisbt · mantisbt
Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an improper type checking on the password parameter. Other database backends are not affect
Fonti: api.vulncheck.com
-
CVE-2026-28516 rilevata dai sensori non nel catalogo CISA
opendcim · opendcim
openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitati
Fonti: api.vulncheck.com
-
CVE-2026-17019 Media6.1 non nel catalogo CISA
Crocoblock · JetEngine
The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malicious JavaScript that executes in the browser of any user who
Fonti: patchstack.com
-
CVE-2026-13764 non nel catalogo CISA
StylemixThemes · Masterstudy - Education WordPress Theme
The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the `masterstudy_ms_stm_set_discard_transient` AJAX action. This makes it possible for aut
Fonti: patchstack.com
-
CVE-2026-12427 non nel catalogo CISA
Repute InfoSystems · ARforms
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'description' parameter in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts i
Fonti: patchstack.com
-
CVE-2026-12424 non nel catalogo CISA
Repute InfoSystems · ARforms
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Referer Header in all versions up to, and including, 7.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that
Fonti: patchstack.com
-
CVE-2026-124014 rilevata dai sensori non nel catalogo CISA
Copeland · XWEB EVO
XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the system configuration file /etc/xwebconfig.json by sending a crafted POST request to config.lua with action=set, which performs no session validation and writes the r
Fonti: api.vulncheck.com · vulncheck.com
-
CVE-2026-120446 Critica9.4 rilevata dai sensori non nel catalogo CISA
madong-code · madong-admin-saas
madong-admin-saas through 5.1.4 contains a missing authentication vulnerability in the platform tenant management API because the 'platformapi' middleware key never matches the 'platform' application. Unauthenticated remote attackers can call /platformapi/tenant/account, bind-plan and sync-data endp
Fonti: api.vulncheck.com
-
CVE-2026-118193 non nel catalogo CISA
StellarWP · GiveWP – Donation Plugin and Fundraising Platform
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the `donor_default_user_role` parameter. This is due to the `sanitize_option_donor_default_user_role()` function applying only a narrow li
Fonti: patchstack.com
-
CVE-2025-47541 Alta7.5 non nel catalogo CISA
WPFunnels · Mail Mint
Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Team Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through 1.17.7.
Fonti: patchstack.com
-
CVE-2021-25282 rilevata dai sensori non nel catalogo CISA
SaltStack · Salt
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
Fonti: api.vulncheck.com
-
CVE-2020-13925 non nel catalogo CISA
Apache · Kylin
Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all pr
Fonti: ess.coalitioninc.com
-
CVE-2026-77807 Alta7.5 non nel catalogo CISA
acyba · AcyMailing
The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the `user[name]` Parameter. This makes it possible for unauthenticated attackers to read the conte
Fonti: patchstack.com
-
CVE-2026-66609 Critica9.3 non nel catalogo CISA
CodexThemes · TheGem (Elementor)
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
Fonti: patchstack.com
-
Microsoft · Windows
Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.
Fonti: securelist.com
-
CVE-2026-48876 Alta7.1 non nel catalogo CISA
Web Guy · Stop Spammers
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.
Fonti: patchstack.com
-
CVE-2026-3496 non nel catalogo CISA
Crocoblock · JetBooking
The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f
Fonti: patchstack.com
-
CVE-2026-15983 Alta8.1 non nel catalogo CISA
WebRehab · Super Forms – Drag & Drop Form Builder
The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the `super_save_form` AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create
Fonti: patchstack.com
-
CVE-2026-15272 Media6.5 non nel catalogo CISA
Shamalli · Web 2.0 Directory
The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make
Fonti: patchstack.com
-
CVE-2026-126537 non nel catalogo CISA
saturdaydrive · Ninja Forms - File Uploads
The Ninja Forms - File Uploads add-on for WordPress is vulnerable to Arbitrary File Deletion (and arbitrary file read via S3/Dropbox/Google Drive exfiltration) in versions up to, and including, 3.3.36. The flaw spans NF_FU_Fields_Upload::process() in includes/fields/upload.php — which returns early
Fonti: patchstack.com
-
CVE-2026-125883 non nel catalogo CISA
N-able · N-central
Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema Poisoning. This issue affects N-central: before 26.4.1.
Fonti: previdian.com
-
CVE-2026-123488 Critica9.8 non nel catalogo CISA
craftcms · Craft CMS
Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked statements. Remote attackers can read and wr
Fonti: previdian.com
-
CVE-2026-123478 non nel catalogo CISA
Meow Apps · AI Engine
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.1.
Fonti: patchstack.com
-
CVE-2026-119529 non nel catalogo CISA
RocketGenius · Gravity Forms
The Gravity Forms WordPress plugin before 3.2.2 does not properly restrict the file types that unauthenticated users can upload through its chunked file upload feature, allowing them to read server environment variables and the contents of files within the web root on servers configured to parse Ser
Fonti: patchstack.com
-
CVE-2026-116692 Critica9.8 rilevata dai sensori non nel catalogo CISA
MLflow · MLflow
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, third-party scorer deserialization in mlflow/genai/scorers/base.py accepts request-selected descendants of THIRD_PARTY_SCORER_ALLOWED_MODULES rather than requ
Fonti: api.vulncheck.com · previdian.com
-
CVE-2026-116617 non nel catalogo CISA
Stylemix · Motors – Car Dealership & Classified Listings
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because `stm_save_user_extra_fields()`, hooked to `personal_options_update`, writes the attacker-controlled `stm_dealer_
Fonti: patchstack.com
-
Drupal · Drupal Core
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core allows Reflection Injection. This issue affects Drupal core versions: from 8.9.0 to 10.6.19, from 11.0.0 to 11.3.19, from 11.4.0 to 11.4.10, from 12.0.0-alpha1 to 12.0.0-beta2.
Fonti: api.vulncheck.com
-
CVE-2026-104203 Alta7.5 rilevata dai sensori non nel catalogo CISA
traccar · traccar
Traccar is an open source GPS tracking system. From 5.1 until 6.15.0, WebModule.java's MediaFilter Guice mapping and WebServer.java's Jetty ResourceServlet assign different routing meanings to path parameters at /api/media/*. An unauthenticated attacker who knows or guesses a device unique ID and me
Fonti: api.vulncheck.com
-
CVE-2025-13516 non nel catalogo CISA
Brainstorm Force · SureMail
The SureMail – SMTP and Email Logs Plugin for WordPress is vulnerable to Unrestricted Upload of File with Dangerous Type in versions up to and including 1.9.0. This is due to the plugin's save_file() function in inc/emails/handler/uploads.php which duplicates all email attachments to a web-accessibl
Fonti: patchstack.com
-
CVE-2025-10162 Alta8.6 rilevata dai sensori non nel catalogo CISA
N-Media · OrderConvo – Vendor & Customer Messages After Orders
The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin through 15.1 does not validate the path of files to be downloaded, which could allow unauthenticated users (before version 15.0) and any authenticated user such as a Subscriber (versions 15.0 to 15.1) to read ar
Fonti: api.vulncheck.com
-
CVE-2022-0541 non nel catalogo CISA
flothemes · flo-launch
The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.
Fonti: patchstack.com
-
CVE-2020-1337 Ransomware non nel catalogo CISA
Microsoft · Windows
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; v
Fonti: securelist.com
-
CVE-2026-89324 non nel catalogo CISA
XTemos · Basel Post Types
Fonti: patchstack.com
-
CVE-2026-61949 Critica9.3 non nel catalogo CISA
Bookly · Bookly
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Blind SQL Injection.This issue affects Bookly: from n/a through 27.7.
Fonti: patchstack.com · cve.org
-
CVE-2026-56070 non nel catalogo CISA
ThemeHunk · Advance Product Search
Unauthenticated SQL Injection in Advance Product Search <= 1.4.4 versions.
Fonti: patchstack.com
-
CVE-2026-47668 rilevata dai sensori non nel catalogo CISA
dbgate · dbgate
DbGate is cross-platform database manager. In versions 7.1.8 and prior, DbGate's JSON script runner (`POST /runners/start`) allows remote code execution via code injection in the `functionName` parameter of JSON script `assign` commands. The `functionName` value is interpolated directly into dynamic
Fonti: api.vulncheck.com
-
CVE-2026-3985 Alta7.5 non nel catalogo CISA
constantcontact · Creative Mail – Easier WordPress & WooCommerce Email Marketing
The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all versions up to, and including, 1.6.9. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation
Fonti: patchstack.com
-
CVE-2026-27604 rilevata dai sensori non nel catalogo CISA
fossbilling · fossbilling
FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the API role handling allows unauthenticated access to privileged `/api/system/*` endpoints. Because `system` resolves to the cron admin identity,
Fonti: api.vulncheck.com
-
CVE-2026-124490 rilevata dai sensori non nel catalogo CISA
open-emr · openemr
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the file_path parameter. Attackers can use action=download to read credentials and source
Fonti: api.vulncheck.com
-
CVE-2026-124450 rilevata dai sensori non nel catalogo CISA
open-emr · openemr
OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web user
Fonti: api.vulncheck.com
-
CVE-2026-124446 rilevata dai sensori non nel catalogo CISA
open-emr · openemr
OpenEMR before 8.3.0 contains a path traversal vulnerability in the FaxSMS module's RCFaxClient and SignalWireClient disposeDocument functions that allows authenticated low-privilege users to read and overwrite arbitrary files via the unsanitized file_path parameter. Attackers can request action=dow
Fonti: api.vulncheck.com
-
CVE-2026-119714 Media6.5 non nel catalogo CISA
joedolson · My Calendar - Accessible Event Manager
My Calendar WordPress plugin 3.8.8 before 3.8.11 contains a shortcode injection vulnerability that allows unauthenticated attackers to execute registered shortcodes via the mcs search parameter. The mcs value reaches mc_search_results() in src/my-calendar-search.php without bracket encoding before d
Fonti: patchstack.com
Perché una pagina separata
Dati dal catalogo Known Exploited Vulnerabilities della CISA, opera del governo statunitense in pubblico dominio. Le scadenze indicate vincolano le agenzie federali USA (BOD 22-01); per tutti gli altri sono un ottimo riferimento di priorità.
Dati di sfruttamento: VulnCheck KEV. Il catalogo delle vulnerabilità sfruttate attivamente è di CISA.