Web Application

🛡 Related vulnerabilities 320

Image	ID	Title	Severity	Detected
	CVE-2026-34621 KEV	[KEV] Vulnerability in Adobe acrobat-and-reader (CVE-2026-34621)	High	6 months ago
	CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	6 months ago
	CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	6 months ago
	CVE-2026-35209	defu is software that allows uers to assign default properties recursively. Prior to version 6.1.5, applications that pass unsanitized user input (e.g. parsed JSON request bodies, database records, or...	High	6 months ago
	CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	6 months ago
	CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	6 months ago
	CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	6 months ago
	CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	6 months ago
	CVE-2026-3502 KEV	[KEV] Vulnerability in TrueConf Client (CVE-2026-3502)	High	6 months ago
	CVE-2026-33017 KEV	[KEV] Code Injection in Langflow (CVE-2026-33017)	Critical	6 months ago
	CVE-2026-23921	A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in...	High	6 months ago
	CVE-2026-23920	Host and event action script input is validated with a regex (set by the administrator), but the...	High	6 months ago
	CVE-2025-12821	The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5...	High	7 months ago
	CVE-2025-70151	Unrestricted File Upload in Fabian (CVE-2025-70151)	High	7 months ago
	CVE-2026-1618	Authentication Bypass Using an Alternate Path or Channel vulnerability in Universal Software Inc....	High	8 months ago
	CVE-2020-37210	SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste i...	High	8 months ago
	CVE-2020-37211	SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character...	High	8 months ago
	CVE-2020-37212	SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste...	High	8 months ago
	CVE-2026-1819	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...	High	8 months ago
	CVE-2025-2155	Unrestricted Upload of File with Dangerous Type vulnerability in Echo Call Center Services Trade...	High	9 months ago
	CVE-2025-64666	Vulnerability in microsoft (CVE-2025-64666)	High	10 months ago
	CVE-2025-64140	OS Command Injection in Jenkins (CVE-2025-64140)	High	11 months ago
	CVE-2025-54236 KEV	[KEV] Vulnerability in Adobe commerce (CVE-2025-54236)	Critical	11 months ago
	CVE-2025-10458	Vulnerability in Zephyrproject (CVE-2025-10458)	High	1 year ago
	CVE-2025-2411	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano...	High	1 year ago
	CVE-2025-2413	Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor...	High	1 year ago
	CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	1 year ago
	CVE-2025-53786	Authentication Bypass in microsoft (CVE-2025-53786)	High	1 year ago
	CVE-2025-1675	Out-of-Bounds Read in Zephyrproject (CVE-2025-1675)	High	1 year ago
	CVE-2024-5971	A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not s...	High	2 years ago