Archive
13 November 2026
Vulnerabilities first published on this day (UTC), newest first.
318 results · Clear filters · Feed
-
High 8.6
Fleet before 4.89.0 contains an incorrect authorization flaw in its user administration API that accepts user creation …
-
High 8.7
Fleet before 4.86.2 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server …
-
High 7.1
Coder 2.21.0 before 2.29.24, 2.30.0 before 2.34.16, 2.35.0 before 2.36.11, 2.37.0 before 2.37.8, and 2.38.0 before 2.38…
-
High 8.8
Frappe HRMS 15.0.0 before 15.64.1 Missing Authorization in Bulk Record Action
Frappe HRMS 15.0.0 before 15.64.1 and 16.0.0 before 16.19.0 lacks a write permission check on a bulk record processing action, allowing users with only read access to the related setup record to modify data. Authenticated users with the default Employee role …
-
High 8.7
Frappe HRMS 15.0.0 before 15.64.2 and 16.0.0 before 16.20.0 contains a missing authorization vulnerability in certain r…
-
High 7.1
OpenEMR before 8.5.0 Improper Authorization via patient_tracker_status.php
OpenEMR before 8.5.0 contains an improper authorization vulnerability in patient_tracker_status.php that allows low-privilege authenticated users to modify other patients' tracker entries by supplying arbitrary tracker_id values. Attackers can post statustype…
-
High 7.5
OpenEMR before 8.5.0 RCE via Stored ERA Upload and Background Services
OpenEMR before 8.5.0 contains a remote code execution vulnerability that allows authenticated billing users to store attacker-controlled PHP by uploading a malformed ERA file to era_payments.php. Attackers with a database-write primitive such as SQL injection…
-
High 8.6
OpenEMR before 8.5.0 contains an sql injection vulnerability that allows any authenticated core user to inject SQL by s…
-
High 7.1
OpenEMR before 8.5.0 passes authenticated user-controlled HTML from the doc_lib.php content parameter to mPDF, which re…
-
High 8.6
OpenEMR before 8.5.0 contains a missing authorization vulnerability in interface/forms/procedure_order/common.php that …
-
High 7.1
OpenEMR before 8.5.0 contains an authorization bypass vulnerability in portal/lib/download_template.php that allows any…
-
High 7.5
OpenEMR before 8.5.0 OAuth2 Grant Type Enforcement Bypass via Token Endpoint
OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered grant types because oauth_clients.grant_types is never enforced. Attackers can request tokens with grant_type=password to bypass the user consen…
-
High 8.6
OpenEMR before 8.5.0 contains a missing authorization vulnerability in create_portallogin.php that allows low-privilege…
-
High 8.2
Drag and Drop File Upload for Elementor Forms <= 1.6.2 - Unauthenticated Arbitrary File Deletion via 'form_fields[upload]' Parameter
The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the remove_files function in all versions up to, and including, 1.6.2 This makes it possible for unauth…
-
High 8.1
Photo Gallery, Sliders, Proofing and Themes <= 4.5.5 - Authenticated (Custom+) Arbitrary File Deletion via 'task_list' and 'app_config' Parameters
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handle_job function in all versions up to, and including, 4.5.5 This makes it possi…
-
High 7.1
OpenEMR before 8.5.0 contains a missing authorization vulnerability in immunizations.php, diagnosis_full.php, and billi…
-
High 7.1
OpenEMR before 8.5.0 Missing Authorization via diagnosis_full.php Billing Operations
OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosis_full.php that allows authenticated users to delete or clear any billing record by ID. Attackers can supply a target billing ID in the id parameter with delete or clear mode to de…
-
High 7.2
EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.25 - Unauthenticated Stored Cross-Site Scripting via Comment User-Agent Header
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'HTTP_USER_AGENT (demonstrated); more generally, any attacker-controllable DB column the saved report selects' parameter in all version…
-
High 8.8
Widget Options <= 4.2.6.1 - Authenticated (Contributor+) Code Injection via 'post_content' Parameter
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the `post_content` parameter. This is due to asymmetric parsing …
-
High 7.3
OpenEMR before 8.5.0 Stored XSS via Document Template Rendering
OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows portal patients to run JavaScript in staff sessions by injecting javascript: URLs into document template_data. Attackers can submit an encounterForm value rendered unsanitiz…
-
High 7.1
OpenEMR before 8.5.0 contains an inverted comparison in Document::has_expired() that causes the FHIR Binary download en…
-
High 8.8
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Privilege Escalation in all …
-
High 8.6
OpenEMR before 8.5.0 lacks rate limiting or lockout on TOTP submission, allowing attackers with a valid password to bru…
-
High 8.1
OpenEMR before 8.5.0 Privilege Escalation via Missing Authorization and SQL Injection
OpenEMR before 8.5.0 contains multiple missing authorization and SQL injection defects across report, portal, transaction, and immunization components. Low-privileged Front Office clerks can chain these to read arbitrary database tables including users_secure…
-
High 7.1
OpenEMR before 8.5.0 contains a missing authorization vulnerability in InstallerController that allows any authenticate…
-
High 7.1
OpenEMR before 8.5.0 Persistent SQL Injection via ERA File Reprocessing
OpenEMR before 8.5.0 contains a persistent SQL injection vulnerability in SLEOB::slInvoiceNumber(), where the CLP01 claim control number from uploaded X12 835 ERA files is concatenated unescaped into a query. Attackers with billing write access can upload a c…
-
High 8.7
OpenEMR before 8.5.0 contains a missing authorization vulnerability in authorizations_full.php that allows any authenti…
-
High 7.1
OpenEMR before 8.5.0 contains multiple sql injection vulnerabilities that allow authenticated users to inject payloads …
-
High 8.7
OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows any authenticated user to create patien…
-
High 7.1
OpenEMR before 8.5.0 contains a mass assignment vulnerability in ObservationController::processEnhancedFormSave() that …
-
High 8.8
OpenEMR before 8.5.0 Missing Authorization in custom/ Export and Chart-Tracker Scripts
OpenEMR before 8.5.0 contains a missing authorization vulnerability in several custom/ scripts that rely only on session authentication and never call AclMain::aclCheckCore(). Any authenticated low-privilege user can request export_labworks.php, chart_tracker…
-
High 8.8
OpenEMR before 8.5.0 Missing Authorization on Reports and Reminder Endpoints
OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows any authenticated low-privilege user to access reports, dated reminders, and batch reminder endpoints lacking AclMain::aclCheckCore() checks. Attackers can request patient_list.ph…
-
High 8.7
OpenEMR before 8.5.0 contains an insecure direct object reference vulnerability in the Carecoordination module that all…
-
High 8.8
OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosure
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccda_gateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential…
-
High 7.1
OpenEMR before 8.5.0 contains a missing authorization vulnerability in print_referral.php and trend_form.php that allow…
-
High 7.2
OpenEMR before 8.5.0 contains an SQL injection vulnerability in the Syndromic Surveillance report because the form_icd_…
-
High 7.2
OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions …
-
High 8.1
OpenEMR before 8.5.0 SQL Injection via CCR revandapprove Parameter Names
OpenEMR before 8.5.0 contains an sql injection vulnerability in CcrTable::insertApprovedData() that allows authenticated users to inject SQL through request parameter names used as column names. Attackers can send crafted patient_data-*-sel parameters to the …
-
High 8.7
OpenEMR before 8.5.0 contains an SQL injection vulnerability in SLEOB::slInvoiceNumber() in src/Billing/SLEOB.php, whic…
-
High 8.1
OpenEMR before 8.5.0 Path Traversal via ERA 835 File Upload
OpenEMR before 8.5.0 contains a path traversal vulnerability in era_payments.php and sl_eob_search.php that allows authenticated billing users to write files outside the ERA directory. Attackers can embed traversal sequences in the GS04 element of an uploaded…