Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-5583 |
|
Vulnerability in sqli (CVE-2026-5583)
vulnerability in sqli (CVE-2026-5583). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5579 |
|
Vulnerability in sqli (CVE-2026-5579)
vulnerability in sqli (CVE-2026-5579). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5576 |
|
Vulnerability in CVE-2026-5576 (CVE-2026-5576)
vulnerability in CVE-2026-5576 (CVE-2026-5576). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5578 |
|
Vulnerability in sqli (CVE-2026-5578)
vulnerability in sqli (CVE-2026-5578). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5575 |
|
Vulnerability in sqli (CVE-2026-5575)
vulnerability in sqli (CVE-2026-5575). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5565 |
|
Vulnerability in sqli (CVE-2026-5565)
vulnerability in sqli (CVE-2026-5565). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5564 |
|
Vulnerability in sqli (CVE-2026-5564)
vulnerability in sqli (CVE-2026-5564). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5560 |
|
Vulnerability in sqli (CVE-2026-5560)
vulnerability in sqli (CVE-2026-5560). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5561 |
|
Vulnerability in CVE-2026-5561 (CVE-2026-5561)
vulnerability in CVE-2026-5561 (CVE-2026-5561). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5555 |
|
Vulnerability in sqli (CVE-2026-5555)
vulnerability in sqli (CVE-2026-5555). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5558 |
|
Vulnerability in sqli (CVE-2026-5558)
vulnerability in sqli (CVE-2026-5558). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5554 |
|
Vulnerability in sqli (CVE-2026-5554)
vulnerability in sqli (CVE-2026-5554). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5553 |
|
Vulnerability in sqli (CVE-2026-5553)
vulnerability in sqli (CVE-2026-5553). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5552 |
|
Vulnerability in sqli (CVE-2026-5552)
vulnerability in sqli (CVE-2026-5552). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5551 |
|
Vulnerability in sqli (CVE-2026-5551)
vulnerability in sqli (CVE-2026-5551). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5546 |
|
Vulnerability in CVE-2026-5546 (CVE-2026-5546)
vulnerability in CVE-2026-5546 (CVE-2026-5546). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5541 |
|
Cross-Site Scripting (XSS) in CVE-2026-5541 (CVE-2026-5541)
cross-site scripting in CVE-2026-5541 (CVE-2026-5541). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5542 |
|
Cross-Site Scripting (XSS) in CVE-2026-5542 (CVE-2026-5542)
cross-site scripting in CVE-2026-5542 (CVE-2026-5542). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5543 |
|
Vulnerability in sqli (CVE-2026-5543)
vulnerability in sqli (CVE-2026-5543). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5540 |
|
Vulnerability in sqli (CVE-2026-5540)
vulnerability in sqli (CVE-2026-5540). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5539 |
|
Cross-Site Scripting (XSS) in CVE-2026-5539 (CVE-2026-5539)
cross-site scripting in CVE-2026-5539 (CVE-2026-5539). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5537 |
|
Vulnerability in c (CVE-2026-5537)
vulnerability in c (CVE-2026-5537). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5535 |
|
Path Traversal in path-traversal (CVE-2026-5535)
path traversal in path-traversal (CVE-2026-5535). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5534 |
|
Vulnerability in sqli (CVE-2026-5534)
vulnerability in sqli (CVE-2026-5534). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25248 |
|
Cross-Site Scripting (XSS) in mybb (CVE-2018-25248)
cross-site scripting in mybb (CVE-2018-25248). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25249 |
|
Cross-Site Scripting (XSS) in mybb (CVE-2018-25249)
cross-site scripting in mybb (CVE-2018-25249). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-25242 |
|
Vulnerability in c (CVE-2018-25242)
vulnerability in c (CVE-2018-25242). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-20052 |
|
Unrestricted File Upload in snewscms (CVE-2016-20052)
vulnerability in snewscms (CVE-2016-20052). Successful exploitation can lead to full system takeover.
|
| CVE-2026-1233 |
|
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...
The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing hardcoded MySQL database credentials for the vendor's external telemetry server in the `Mementor_TT...
|
| CVE-2026-3445 |
|
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass in all versions up to, and including, 4.16.11. This is due to a missing ownership verification on the...
|
| CVE-2026-4896 |
|
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.7.25 via multiple AJAX actions including `wcfm_modify_order_status`, `delete_wcfm_article`,...
|
| CVE-2026-34780 |
|
Vulnerability in electronjs (CVE-2026-34780)
vulnerability in electronjs (CVE-2026-34780). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34778 |
|
Vulnerability in electronjs (CVE-2026-34778)
vulnerability in electronjs (CVE-2026-34778). Data can be tampered with by attackers.
|
| CVE-2026-34779 |
|
OS Command Injection in electronjs (CVE-2026-34779)
OS command injection in electronjs (CVE-2026-34779). Confidential information can be exposed externally.
|
| CVE-2026-34955 |
|
OS Command Injection in c (CVE-2026-34955)
OS command injection in c (CVE-2026-34955). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34774 |
|
Use-After-Free in electronjs (CVE-2026-34774)
vulnerability in electronjs (CVE-2026-34774). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34772 |
|
Use-After-Free in electronjs (CVE-2026-34772)
vulnerability in electronjs (CVE-2026-34772). Confidential information can be exposed externally.
|
| CVE-2026-34773 |
|
Vulnerability in electronjs (CVE-2026-34773)
vulnerability in electronjs (CVE-2026-34773). Data can be tampered with by attackers.
|
| CVE-2026-34775 |
|
Vulnerability in electronjs (CVE-2026-34775)
vulnerability in electronjs (CVE-2026-34775). Confidential information can be exposed externally.
|
| CVE-2026-34776 |
|
Out-of-Bounds Read in electronjs (CVE-2026-34776)
vulnerability in electronjs (CVE-2026-34776). Confidential information can be exposed externally.
|
| CVE-2026-34777 |
|
Vulnerability in electronjs (CVE-2026-34777)
vulnerability in electronjs (CVE-2026-34777). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34769 |
|
Vulnerability in electronjs (CVE-2026-34769)
vulnerability in electronjs (CVE-2026-34769). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34771 |
|
Use-After-Free in electronjs (CVE-2026-34771)
vulnerability in electronjs (CVE-2026-34771). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34766 |
|
Vulnerability in electronjs (CVE-2026-34766)
vulnerability in electronjs (CVE-2026-34766). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34767 |
|
Vulnerability in electronjs (CVE-2026-34767)
vulnerability in electronjs (CVE-2026-34767). Data can be tampered with by attackers.
|
| CVE-2026-34768 |
|
Vulnerability in electronjs (CVE-2026-34768)
vulnerability in electronjs (CVE-2026-34768). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-34770 |
|
Use-After-Free in electronjs (CVE-2026-34770)
vulnerability in electronjs (CVE-2026-34770). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34937 |
|
OS Command Injection in c (CVE-2026-34937)
OS command injection in c (CVE-2026-34937). Successful exploitation can lead to full system takeover.
|
| CVE-2026-34938 |
|
Vulnerability in praisonaiagents (CVE-2026-34938)
vulnerability in praisonaiagents (CVE-2026-34938). Successful exploitation can lead to full system takeover. Exploitable via ``str``. Mitigation: upgrade to `1.5.90` or later.
|
| CVE-2026-34939 |
|
Vulnerability in praison (CVE-2026-34939)
vulnerability in praison (CVE-2026-34939). Risk of unauthorized operations or information disclosure.
|