Export limit exceeded: 398619 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (398619 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-51994 | 1 Geelen | 1 Mcp-remote | 2026-09-27 | 9.1 Critical |
| mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from a remote MCP server's WWW-Authenticate header | ||||
| CVE-2026-51995 | 1 Geelen | 1 Mcp-remote | 2026-09-27 | 7.5 High |
| An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components | ||||
| CVE-2026-51996 | 1 Geelen | 1 Mcp-remote | 2026-09-27 | N/A |
| An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function | ||||
| CVE-2026-51997 | 1 Geelen | 1 Mcp-remote | 2026-09-27 | 8.8 High |
| An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions | ||||
| CVE-2026-52001 | 1 Geelen | 1 Mcp-remote | 2026-09-27 | N/A |
| An issue in geelen mcp-remote 0.1.18 through 0.1.38 allows a remote attacker to obtain sensitive information via the SSE transport eventSourceInit fetch wrapper " src/lib/utils.ts | ||||
| CVE-2026-88359 | 1 Pantoniou | 1 Libfyaml | 2026-09-27 | 6.5 Medium |
| libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. The allocated stack memory is not released until the function returns, causing cumulative stack growth that can exceed the process stack limit and result in SIGSEGV and denial of service. | ||||
| CVE-2026-80513 | 1 Wordpress-extensions | 1 Wpforo Forum | 2026-09-27 | 7.5 High |
| The wpForo Forum WordPress plugin before 3.1.6 does not restrict which classes may be instantiated when it deserializes a user-supplied profile field value, allowing authenticated users with Subscriber-level access and above to inject a PHP Object. No POP chain is present in the wpForo Forum WordPress plugin before 3.1.6 itself; if one is present via another installed wpForo Forum WordPress plugin before 3.1.6 or , this could lead to remote code execution, arbitrary file operations, or SQL injection. This is an incomplete fix of CVE-2026-49769. | ||||
| CVE-2026-97165 | 2026-09-27 | N/A | ||
| Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated. | ||||
| CVE-2026-82195 | 1 Wordpress-extensions | 1 10web Booster | 2026-09-27 | 6.5 Medium |
| The 10Web Booster WordPress plugin before 2.34.0 does not restrict access to the routine which issues the shared secret that authenticates its cloud connection, disclosing that secret to unauthenticated visitors and letting them delete it repeatedly, preventing an administrator from completing a legitimate connection. | ||||
| CVE-2026-82849 | 1 Wordpress-extensions | 1 Masteriyo Lms | 2026-09-27 | 4.3 Medium |
| The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is skipped whenever the requested account is not named with a non-zero value, in which case the records of every learner on the site are returned at once. | ||||
| CVE-2026-82850 | 1 Wordpress-extensions | 1 Masteriyo Lms | 2026-09-27 | 4.3 Medium |
| The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is applied only to a fixed list of question types, so the answers to every other type are returned in full to anyone able to view the questions. | ||||
| CVE-2026-84151 | 1 Wordpress-extensions | 1 The Post Grid | 2026-09-27 | 3.5 Low |
| The Post Grid WordPress plugin before 7.9.5 does not limit an expansion of the WordPress allowed-HTML list to its own markup and applies it site-wide, allowing users with the Contributor role and above to store iframe, style and input elements that are normally stripped from their content, leading to HTML injection (phishing frames, CSS defacement and spoofed input forms) that renders to any visitor and to administrators reviewing the content. | ||||
| CVE-2026-88843 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 7.2 High |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not validate one of its display-style settings before using it to build a template path, allowing users with the Contributor role and above to include and execute arbitrary local PHP files on the server. An equivalent path was corrected in an earlier release and this one was not, so the issue persists in versions the earlier advisory reports as fixed. | ||||
| CVE-2026-88845 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 4.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own account. | ||||
| CVE-2026-88846 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 5.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not check whether user registration is enabled on the site before creating an account through one of its front-end registration flows, allowing unauthenticated users to create accounts, and be logged into them, on sites where registration has been deliberately disabled. | ||||
| CVE-2026-88847 | 1 Wordpress-extensions | 1 Masterstudy Lms | 2026-09-27 | 4.3 Medium |
| The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to. | ||||
| CVE-2026-89002 | 1 Wordpress-extensions | 1 Wpematico Rss Feed Fetcher | 2026-09-27 | 6.8 Medium |
| The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering it, which could allow users such as contributors to perform Stored Cross-Site Scripting attacks against higher-privileged users who review the campaign. | ||||
| CVE-2026-89004 | 1 Wordpress-extensions | 1 Wpematico Rss Feed Fetcher | 2026-09-27 | 2.7 Low |
| The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration and run log, allowing users with contributor-level access and above to read the configuration and execution logs of campaigns created by other users, including administrators. | ||||
| CVE-2026-89005 | 1 Wordpress-extensions | 1 Wpematico Rss Feed Fetcher | 2026-09-27 | 6.8 Medium |
| The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitise and escape one of its campaign configuration fields when a certain feature is enabled, which allows users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the session of any higher-privileged user who later views the campaign. | ||||
| CVE-2026-93661 | 1 Wordpress-extensions | 1 Events Manager | 2026-09-27 | 2.7 Low |
| The Events Manager WordPress plugin before 7.4.5 does not stop a ticket-update request from replacing the identifiers of the ticket it was authorized against, letting a user who can manage one event's tickets overwrite and reassign any ticket on the site to their own event. | ||||