Archive
13 September 2026
Vulnerabilities first published on this day (UTC), newest first.
58 results · Clear filters · Feed
-
Medium 4.2
rtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR
The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.12 does not check ownership before changing the privacy level of an activity and its attached media, relying only on a nonce shared with every logged-in user, allowing users with a …
-
Medium 4.7
User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters
The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL, which can be abused for phish…
-
Medium 5.4
Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref
The Simple Membership WordPress plugin before 4.7.8 does not validate that the membership level supplied in a PayPal payment notification matches the level configured for the paid payment button, allowing members to pay for a lower-priced membership while bei…
-
Medium 5.3
Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entry
The Contact Form to Chat Apps | Click to Chat to Order WordPress plugin before 2.15.8 does not perform any capability, nonce or session check on one of its public AJAX actions, allowing unauthenticated users to read the submitted entries of any form created w…
-
Medium 4.7
Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function update_system_module_order/update_dimension_order of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manip…
-
Medium 4.3
Forgejo 13.0.0 through 16.0.4, when "[federation] ENABLED = true" is set, has a spoofing issue that affects identity in…
-
Medium 5.3
restify node-restify static.js serveStatic path traversal
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this d…
-
Medium 6.3
webgjc web_robot web.py controller_recover os command injection
A security vulnerability has been detected in webgjc web_robot 2.4.0/2.5.0/2.8.0. The affected element is the function controller_listen/controller_recover of the file py/web.py. The manipulation of the argument case_name leads to os command injection. It is …
-
Medium 6.3
sanjevirau gsubs Electron index.js showQuerySuccessPage code injection
A weakness has been identified in sanjevirau gsubs up to 1.0.3. Impacted is the function showQuerySuccessPage of the file renderer/index.js of the component Electron. Executing a manipulation of the argument filename can lead to code injection. The attack may…
-
Medium 6.3
lenve vhr MailReceiver deserialization
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulation results in deserialization. The attack is possible to be carried out remotely. The exploit has b…
-
Medium 5.0
An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the in…
-
Medium 6.7
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the confi…
-
Medium 5.7
An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. …
-
Medium 5.4
A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote…
-
Medium 6.3
Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as…
-
Medium 4.3
CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.
-
Medium 4.3
CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list.
-
Medium 5.8
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.