Export limit exceeded: 51971 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (16978 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-120002 | 1 Microsoft | 1 Sharepoint Server | 2026-11-11 | 9.9 Critical |
| Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2024-6806 | 1 Ni | 1 Veristand | 2026-11-11 | 9.8 Critical |
| The NI VeriStand Gateway is missing authorization checks when an actor attempts to access Project resources. These missing checks may result in remote code execution. This affects NI VeriStand 2024 Q2 and prior versions. | ||||
| CVE-2024-6805 | 1 Ni | 1 Veristand | 2026-11-11 | 7.5 High |
| The NI VeriStand Gateway is missing authorization checks when an actor attempts to access File Transfer resources. These missing checks may result in information disclosure or remote code execution. This affects NI VeriStand 2024 Q2 and prior versions. | ||||
| CVE-2026-19699 | 1 Wordpress-extensions | 1 Gutenkit | 2026-11-11 | 2.7 Low |
| The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account. | ||||
| CVE-2025-15691 | 1 Wordpress-extensions | 1 Wpfunnels | 2026-11-11 | 5.3 Medium |
| The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when registration is disabled. This is an incomplete fix for CVE-2025-12353: the check added in 3.6.3 covers only one of the three registration paths. | ||||
| CVE-2026-84066 | 1 Wordpress-extensions | 1 Directorist | 2026-11-11 | 3.1 Low |
| The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image metadata on posts belonging to other users. | ||||
| CVE-2026-84927 | 1 Wordpress-extensions | 1 Embedpress | 2026-11-11 | 2.7 Low |
| The EmbedPress WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API routes, allowing users with the Contributor role and above to modify a site-wide store, deleting entries an administrator configured and injecting their own, which are rendered publicly across the site. | ||||
| CVE-2026-13159 | 1 Wordpress-extensions | 1 Real Estate Papi | 2026-11-11 | 4.3 Medium |
| The Real Estate Papi WordPress theme through 1.0.5 does not perform capability or CSRF checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to install a fixed set of companion from the WordPress.org repository. Where the request runs in the session of a user who can activate , those are activated as well. | ||||
| CVE-2026-85038 | 1 Wordpress-extensions | 1 B2bking | 2026-11-11 | 5.3 Medium |
| The B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More WordPress plugin before 5.2.40 does not verify that a role selected during registration is one actually offered on the registration form, allowing unauthenticated users to assign themselves to restricted B2B customer groups and to skip the manual account-approval workflow during self-registration. | ||||
| CVE-2026-75861 | 1 Wordpress-extensions | 1 Ultimate Gift Cards For Woocommerce | 2026-11-11 | 6.5 Medium |
| The Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 does not verify that the user redeeming a gift card is its intended recipient, allowing any authenticated user, such as a subscriber, to redeem gift cards belonging to other users, zeroing their balance and crediting the value to themselves. In 3.2.9 an ownership check was added on one of the two affected redemption paths; the one that remains requires a companion Ultimate Gift Cards for WooCommerce WordPress plugin before 3.2.10 from the same vendor to be active. | ||||
| CVE-2026-80341 | 1 Wordpress-extensions | 1 Payment Plugins For Paypal Woocommerce | 2026-11-11 | 5.9 Medium |
| The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not verify that a stored payment method belongs to the user attaching it, allowing any authenticated user, such as a subscriber, to bind another customer's stored card to their own account and then charge or delete it. Exploitation requires the attacker to already know the payment provider's identifier for the victim's stored method, which the Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.26 does not expose. | ||||
| CVE-2026-82184 | 1 Wordpress-extensions | 1 Wplp Cookie Consent | 2026-11-11 | 5.3 Medium |
| The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have any authorisation or CSRF checks when storing visitor consent state, and the code that does so runs on every front-end page load, allowing unauthenticated attackers to overwrite a site-wide option with arbitrary data. | ||||
| CVE-2026-82185 | 1 Wordpress-extensions | 1 Wplp Cookie Consent | 2026-11-11 | 4.3 Medium |
| The WPLP Cookie Consent WordPress plugin before 4.4.2 does not have capability or nonce checks on some of its A/B testing actions, allowing any authenticated user, such as a subscriber, to overwrite the cookie banner configuration shown to every visitor and to irreversibly reset the stored A/B test results. | ||||
| CVE-2026-82848 | 1 Wordpress-extensions | 1 Masteriyo Lms | 2026-11-11 | 5.3 Medium |
| The Masteriyo LMS WordPress plugin before 3.4.0 does not perform any authorization check before returning a course enrolment record over its REST API, allowing unauthenticated users to read any learner's enrolment status, timestamps and course-progress data by walking sequential record identifiers. A related gap lets any enrolled user retrieve other learners' enrolment records as well. | ||||
| CVE-2026-119827 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-11-11 | 7 High |
| Missing authorization in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-126811 | 1 Bookstackapp | 1 Bookstack | 2026-11-11 | 5.4 Medium |
| BookStack before 26.09.3 contains an incorrect authorization vulnerability that allows authenticated users to access other users' unpublished draft page images by checking only PageView permission without draft status. Attackers can read drawio data via the base64 endpoint or rename, replace, or delete draft images by sequential ID to disclose or tamper with unpublished work. | ||||
| CVE-2026-126809 | 1 Wwbn | 1 Avideo | 2026-11-11 | 7.1 High |
| WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in objects/import.json.php that allows uploaders to import other users' MP4 files by referencing any folder under videos/. Attackers can copy private, unlisted, password-protected or pay-per-view videos, read victims' .txt/.html sidecars as descriptions, list files via objects/listFiles.json.php, and delete victims' media using the delete parameter. | ||||
| CVE-2026-126808 | 1 Jerryhanjj | 1 Erp | 2026-11-11 | 4.3 Medium |
| weDevs ERP (WP ERP) through 1.17.11 contains an incorrect authorization vulnerability that allows authenticated employees to edit their own HR records because HRM AJAX handlers check erp_edit_employee instead of erp_manage_jobinfo. Attackers can post their own user_id with the My Profile nonce to change designation, reporting manager, pay rate, and employment type, or delete job history. | ||||
| CVE-2026-126805 | 1 Wwbn | 1 Avideo | 2026-11-11 | 7.2 High |
| WWBN AVideo through 29.7.1 contains an incorrect authorization vulnerability that allows delegated Videos Admin users to obtain video_id_hash values bound to any video owner via encoder endpoints like aVideoEncoderStatus.json.php. Attackers can request the hash for an administrator-owned video and replay it through useVideoHashOrLogin() for password-less login, gaining plugin upload, configuration, and user management access. | ||||
| CVE-2026-118740 | 1 Microsoft | 2 Aspire.dashboard.sdk.linux-x64, Aspire Dashboard | 2026-11-11 | 9.1 Critical |
| Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network. | ||||