Archive
15 June 2026
Vulnerabilities first published on this day (UTC), newest first.
126 results · Clear filters · Feed
-
Medium 5.5
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an …
-
Medium 6.5
Use of a non-secure protocol as the default FTP configuration in Canon EOS Network Setting Tool Version 1.5.0 or earlier
-
Medium 6.8
Use of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlier
-
Medium 6.2
Use of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
-
Medium 6.5
Improper validation of server certificates in Canon EOS Network Setting Tool Version 1.5.0 or earlier
-
Medium 6.5
Improper validation of SSH host keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier
-
Medium 6.1
Slim has Reflected XSS in the HtmlErrorRenderer
Slim is a PHP micro framework that enables users to write simple web applications and APIs. In versions 4.4.0 through 4.15, if an application uses HttpException::setTitle() and/or setDescription() to include untrusted/request-derived data in the error title o…
-
Medium 6.5
WordPress Welcart e-Commerce plugin <= 2.11.28 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Welcart e-Commerce <= 2.11.28 versions.
-
Medium 6.5
WordPress FV Flowplayer Video Player plugin < 7.5.51.7212 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in FV Flowplayer Video Player < 7.5.51.7212 versions.
-
Medium 4.7
WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.
-
Medium 6.5
WordPress XCloner plugin <= 4.8.6 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in XCloner <= 4.8.6 versions.
-
Medium 6.5
WordPress JS Help Desk plugin <= 3.0.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JS Help Desk <= 3.0.9 versions.
-
Medium 6.5
WordPress WP Job Portal plugin <= 2.5.2 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in WP Job Portal <= 2.5.2 versions.
-
Medium 6.5
WordPress Visual Link Preview plugin <= 2.4.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Visual Link Preview <= 2.4.1 versions.
-
Medium 6.5
WordPress King Addons for Elementor plugin <= 51.1.62 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.62 versions.
-
Medium 6.5
WordPress Stripe Payments plugin <= 2.0.98 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Stripe Payments <= 2.0.98 versions.
-
Medium 6.5
WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Masteriyo - LMS <= 2.1.8 versions.
-
Medium 6.5
WordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Modula Image Gallery <= 2.14.23 versions.
-
Medium 6.5
WordPress Event Tickets plugin <= 5.27.5 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Event Tickets <= 5.27.5 versions.
-
Medium 6.5
WordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Simple Membership <= 4.7.2 versions.
-
Medium 6.5
WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability
Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.
-
Medium 6.5
WordPress Contest Gallery plugin <= 28.1.7 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Contest Gallery <= 28.1.7 versions.
-
Medium 6.5
WordPress Contest Gallery plugin <= 28.1.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Contest Gallery <= 28.1.6 versions.
-
Medium 6.5
WordPress Contest Gallery plugin <= 28.1.7 - Other Vulnerability Type vulnerability
Unauthenticated Other Vulnerability Type in Contest Gallery <= 28.1.7 versions.
-
Medium 6.3
WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability
Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.
-
Medium 6.5
WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.
-
Medium 6.5
WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability
Subscriber Broken Authentication in WP Full Stripe Free <= 8.4.1 versions.
-
Medium 6.5
WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in ProfilePress <= 4.16.13 versions.
-
Medium 5.8
WordPress Simple Cloudflare Turnstile plugin <= 1.38.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.
-
Medium 6.5
WordPress WPPizza plugin <= 3.19.9 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WPPizza <= 3.19.9 versions.
-
Medium 6.5
WordPress myCred plugin <= 3.0.3 - Broken Access Control vulnerability
Subscriber Broken Access Control in myCred <= 3.0.3 versions.
-
Medium 6.5
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Amelia <= 2.2 versions.
-
Medium 6.5
WordPress Groundhogg plugin < 4.4.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Groundhogg < 4.4.1 versions.
-
Medium 6.3
WordPress KiviCare plugin <= 4.2.1 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.
-
Medium 6.5
WordPress WP SMS plugin <= 7.2.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
-
Medium 6.5
WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.
-
Medium 6.5
WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.9 - Broken Access Control vulnerability
Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions.
-
Medium 6.5
WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.
-
Medium 6.4
WordPress Ultra Addons for WPForms plugin <= 1.0.11 - Broken Access Control vulnerability
Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions.
-
Medium 6.5
WordPress RepairBuddy plugin <= 4.1132 - Broken Access Control vulnerability
Subscriber Broken Access Control in RepairBuddy <= 4.1132 versions.