Search vulnerabilities

Expected end of text, found '‑' (at char 7), (line:1, col:8)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,120

CVE-2026-81777

WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability

Authentication Bypass by Spoofing vulnerability in WPDeveloper Essential Addons for Elementor allows Identity Spoofing. This issue affects Essential Addons for Elementor: from n/a through 6.8.0.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Wordpress Wpdeveloper
Products
Wordpress Essential Addons For Elementor
CVE-2026-78103

Dimension Log Server Configuration Lock Bypass Vulnerability

WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first completing the UI unlock step. This allows an authenticated read-write administrator session to bypass the intended editing workflow and overwrite configuration changes being made by another concurrent administrator session.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Dimension
CVE-2026-78612

Dimension SQL Injection in Scheduled Report

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows an authenticated user with report administration permissions gain arbitrary command execution as the Dimension WebUI process user by sending specially crafted requests.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Dimension
CVE-2026-78498

Dimension Server-Side Request Forgery via Email Server Test Settings

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authenticated privileged attacker to enumerate exposed network services on adjacent network systems.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Dimension
CVE-2026-78616

Dimension Stored XSS via Trusted CA Certificate Configuration

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Watchguard
Products
Dimension
CVE-2026-38819

Memory Exhaustion Vulnerability in openNDS Allows Unauthenticated Attacker to Drain System Memory

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Opennds
Products
Opennds
CVE-2026-15798

Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected scripts execute specifically when a user opens the affected post in the WordPress block editor, making Editors and Administrators the primary targets.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Nextendweb Wordpress
Products
Smart Slider 3 Wordpress
CVE-2026-8643

pip can extract console_scripts and gui_scripts outside installation directory

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory.

CVSS 4.0 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Pypa
Products
Pip
CVE-2026-82247

gitoxide before 0.37.1 HTTP Basic credential leak via URL parsing

gitoxide's gix-url crate (<= 0.32.0, fixed in 0.37.1) uses a hand-rolled URL parser that does not treat '?' or '#' as terminating the authority component, contrary to RFC 3986. As a consequence, gix-transport's HTTP redirect identity guard (can_reuse_identity) compares the wrong host and fails open. An attacker controlling a redirect response can craft a Location header of the form <attacker-authority>?@<original-authority> so that gitoxide sends the caller's HTTP Basic Authorization credentials to an unintended host. gix-transport is affected in versions <= 0.49.0 (fixed in 0.58.1).

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Gitoxidelabs
Products
Gitoxide
CVE-2026-82222

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection. This issue affects GiveWP: from n/a through 4.16.7.1.

CVSS 3.1 · 10 Critical EPSS 2.2% KEV · Not listed
Vendors
Liquid Web / Stellarwp Wordpress
Products
Givewp Wordpress
CVE-2026-82082

Green-Computing｜NUMail - OS Command Injection

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server.

CVSS 4.0 · 9.3 Critical EPSS 2.0% KEV · Not listed
Vendors
Green-computing
Products
Numail
CVE-2026-82081

SSRF via PDF Export in wallabag 2.x

wallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled during PDF export.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Wallabag
Products
Wallabag
CVE-2026-81728

Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with GETPOST('updatekeys', 'array') in htdocs/imports/import.php, which applies only the generic alphanohtml filter: that strips HTML but leaves SQL keywords, comment markers, parentheses, spaces and quotes intact. import_insert() in htdocs/core/modules/import/import_csv.modules.php then iterates the submitted values and builds a filter with $where[] = $key.' = '.$data[$key], having first applied preg_replace('/^.*\./i', '', $key), an alias strip that does nothing to a value containing no dot. The assembled string is executed through $this->db->query(). The injected SELECT resolves the row id that the import then assigns to $lastinsertid, which becomes the WHERE target of a subsequent UPDATE, so a UNION SELECT returning an attacker-chosen integer both exfiltrates arbitrary table content and redirects which row the import overwrites; for category link tables the raw filter array is spliced into that UPDATE directly. The interface offers a fixed list of legitimate column codes but the server never checks the submitted values against it. A user holding the import permission can exploit this. Release 23.0.4 does not carry the fix; the allow-list test was added in 24.0.0.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Dolibarr
Products
Dolibarr Dolibarr Erp\/crm Erp Crm
CVE-2026-80697

erofs: ensure valid f_path for page cache sharing

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing Previously, backing files for page cache sharing were set up with f_path left as NULL (only f_inode was valid). It worked, but a recent mincore fix relies on f_path.mnt and crashes (found by "erofs/028" on 7.2-rc4): BUG: kernel NULL pointer dereference, address: 0000000000000018 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 3 UID: 0 PID: 675528 Comm: fincore Not tainted 7.2.0-rc4-00002-g[]-dirty #1 PREEMPT(lazy) Hardware name: Red Hat KVM, BIOS 1.16.0-4.al8 04/01/2014 RIP: 0010:__do_sys_mincore+0xc0/0x2c0 ... Specify valid paths using valid disconnected dentries together with erofs_ishare_mnt instead of leaving f_path empty, so they are more like real backing files in a pseudo filesystem and standard backing_file_open() can be used directly.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2026-79773

Winter CMS before 1.2.13 Local File Inclusion via JavaScript

Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authenticated users with cms.manage_assets permission to disclose arbitrary server-readable files by placing =include or =require directives in theme JavaScript assets. Attackers can reference files like .env outside the theme directory, and the combined output served through the combine route becomes readable by unauthenticated visitors, exposing application keys and database credentials.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Wintercms
Products
Winter
CVE-2026-78239

Xiiaozet LK100W Missing Authentication for Critical Function

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Xiiaozet
Products
Xiiaozet Lk100w
CVE-2026-78073

Joomla Extension - j2commerce.com - Reflected XSS attribute in All Video Share 1.0.0-4.5.0

Joomla Extension - mrvinoth.com - Reflected XSS in All Video Share 1.0.0-4.5.0 - Various user supplied inputs lacked escaping, leading to reflected XSS vectors

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Mrvinoth.com
Products
All Video Share Extension For Joomla
CVE-2026-78037

Xiiaozet LK100W OS Command Injection

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated attacker may be able to execute arbitrary operating system commands with elevated privileges, potentially resulting in unauthorized access to sensitive information or complete device compromise.

CVSS 4.0 · 8.7 High EPSS 1.9% KEV · Not listed
Vendors
Xiiaozet
Products
Xiiaozet Lk100w
CVE-2026-77365

Optimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter

The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'a' (above_fold_images) parameter in all versions up to, and including, 4.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Optimole Wordpress
Products
Optimole – Optimize Images | Convert Webp & Avif | Cdn & Lazy Load | Image Optimization Wordpress