Export limit exceeded: 370167 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (370167 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-65431 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions. | ||||
| CVE-2026-65430 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension - MaxMind credentials where leaked in request URLs, causing a credential leakage vulnerability. | ||||
| CVE-2026-64799 | 1 Regularlabs.com | 2 Articles Anywhere Pro Extension For Joomla, Users Anywhere Pro Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder. | ||||
| CVE-2026-64874 | 1 Regularlabs.com | 1 Cache Cleaner Pro Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension - CDN credentials were exposed in administrator request URLs. | ||||
| CVE-2026-65756 | 1 Regularlabs.com | 1 Keyboard Shortcuts Extension For Joomla | 2026-07-23 | 6.1 Medium |
| Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript. | ||||
| CVE-2026-64876 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates. | ||||
| CVE-2026-64875 | 1 Regularlabs.com | 1 Geoip Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass. | ||||
| CVE-2026-65754 | 1 Regularlabs.com | 1 Rereplacer Pro Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory. | ||||
| CVE-2026-65755 | 1 Regularlabs.com | 2 Articles Anywhere Extension For Joomla, Users Anywhere Extension For Joomla | 2026-07-23 | N/A |
| Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable. | ||||
| CVE-2026-13119 | 2 Roundupwp, Wordpress | 2 Registrations For The Events Calendar – Event Registration Plugin, Wordpress | 2026-07-23 | 6.5 Medium |
| The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled JSON from $_POST['standard'] and uses the JSON array keys directly as column identifiers in the SET clause of an UPDATE statement built inside RTEC_Db_Admin::update_entry(). Only esc_sql() (mysqli_real_escape_string) is applied to the identifier; that function escapes quotes, backslashes, and a few control characters but does not escape spaces, equals signs, parentheses, or hyphens, so an attacker can break out of the identifier context and inject subqueries (terminated with a SQL comment). This makes it possible for authenticated attackers, with Contributor-level access and above who can edit the targeted event, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | ||||
| CVE-2026-15394 | 2 Mahethekiller, Wordpress | 2 Header Footer Script Adder, Wordpress | 2026-07-23 | 6.4 Medium |
| The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet Meta in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-15015 | 2 Cascadiawebservices, Wordpress | 2 Mountdev Ai Mcp Connector For Wordpress, Wordpress | 2026-07-23 | 9.8 Critical |
| The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to obtain an administrator-bound OAuth Bearer token via a self-registered client, granting full administrator-equivalent access to the plugin's MCP tool surface and all exposed WordPress content, users, and options. This is exploitable by combining the publicly accessible Dynamic Client Registration endpoint, which allows unauthenticated callers to register arbitrary OAuth clients with an attacker-controlled redirect_uri, with the unprotected authorization endpoint to complete the full OAuth flow without any administrator interaction. | ||||
| CVE-2025-68081 | 2 Lester Chan, Wordpress | 2 Wp-polls, Wordpress | 2026-07-23 | 5.9 Medium |
| Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions. | ||||
| CVE-2026-24552 | 2 Mischiefmarmot, Wordpress | 2 Create By Mediavine, Wordpress | 2026-07-23 | 8.5 High |
| Contributor SQL Injection in Create by Mediavine <= 2.5.3 versions. | ||||
| CVE-2026-24628 | 2 Supsystic, Wordpress | 2 Photo Gallery By Supsystic, Wordpress | 2026-07-23 | 5.9 Medium |
| Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. | ||||
| CVE-2026-24639 | 2 Ronald Huereca, Wordpress | 2 Photo Block, Wordpress | 2026-07-23 | 4.4 Medium |
| Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions. | ||||
| CVE-2026-25405 | 2 Digitalme, Wordpress | 2 Eroom, Wordpress | 2026-07-23 | 8.5 High |
| Contributor SQL Injection in eRoom <= 1.7.1 versions. | ||||
| CVE-2026-25427 | 2 Digitalme, Wordpress | 2 Eroom, Wordpress | 2026-07-23 | 5.4 Medium |
| Subscriber Broken Access Control in eRoom <= 1.7.1 versions. | ||||
| CVE-2026-27064 | 2 Everpress, Wordpress | 2 Mailster, Wordpress | 2026-07-23 | 9.1 Critical |
| Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. | ||||
| CVE-2026-27377 | 2 Axiomthemes, Wordpress | 2 Quickcal - Appointment Booking Calendar For Wordpress, Wordpress | 2026-07-23 | 6.7 Medium |
| Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. | ||||