Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-09-23 04:33Z
2026-08-16
2026-08-16 14:16Z
CRIT

CVE-2026-72887 — Net: Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a callback to the constructor selects OAuth 1.0a. get_request_token then revokes that choice when the request token response omits oauth_callback_confirmed, with no exception, no warning and no option to require 1.0a. The access token request is built from the OAuth 1.0 message class, which has no verifier parameter, so oauth CVSSv3.1 9.8 (CRITICAL)

CWECWE 757TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-16
2026-08-16 14:16Z
CRIT

CVE-2026-19349 — Lemonldap: Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormInfo() creates the state session with the positional call `getApacheSession( undef, 1, 0, 'GitHubState' )`. getApacheSession() takes a session id followed by a named argument hash, so CVSSv3.1 9.8 (CRITICAL)

CWECWE 305CWECWE 628VNDLemonldapTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-16
2026-08-16 09:16Z
CRIT

CVE-2024-13784 — Contact: The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2024-13784

The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input from form submissions. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the CVSSv3.1 9.8 (CRITICAL)

CWECWE 502VNDContactTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-16
2026-08-16 06:16Z
CRIT

CVE-2026-19725 — WPvivid: The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19725

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log file path, allowing an attacker holding a site to site transfer key to create a log file in any existing writable directory of the site, including the web root. The file name always carries a fixed suffix and the contents are always the WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131's o CVSSv3.1 9.1 (CRITICAL) · EPSS 6th percentile

CWECWE 22VNDWpvividTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-16
2026-08-16 06:16Z
CRIT

CVE-2026-19714 — Simple: The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19714

The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticate as any user whose email address such a token carries, up to and including an administrator. Every site with the Simple JWT Login WordPress plugin before 3.6.8's Google sign-in enabled is affected. CVSSv3.1 9.1 (CRITICAL) · EPSS 6th percentile

CWECWE 287VNDSimpleTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-16
2026-08-16 06:16Z
CRIT

CVE-2026-18316 — Solace: The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18316

The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0. The handler is registered on both wp_ajax_action-import-zip and wp_ajax_nopriv_action-import-zip and only verifies the 'ajax-nonce' nonce, which is emitted on every admin page via wp_localize_script (unrestricted admin_enqueue_scripts hook) and is therefore accessible to any au CVSSv3.1 9.1 (CRITICAL)

CWECWE 862VNDSolaceTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-16
2026-08-16 05:16Z
CRIT

CVE-2026-18432 — Frontend: The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18432

The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.29.9. The vulnerability exists because `ActionUser::conditions_logic()` gates the `current_user_can('edit_user', $user_id)` authorization check behind an `is_numeric()` test, causing the check to be skipped entirely when `$user_id` is a non-numeric string — a condition that can be induced by passing a crafted value such as `1one` through the unva CVSSv3.1 9.8 (CRITICAL)

CWECWE 269VNDFrontendTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-08-16
2026-08-16 05:16Z
HIGH

CVE-2026-17123 — Royal: The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-17123

The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1064 via the Form Builder widget's 'webhook_url' setting. The widget's render() method persists the attacker-controlled URL into the wpr_webhook_url_{widget_id} option on every render (including a Contributor previewing their own draft), and the wpr_form_builder_webhook AJAX handler — registered for both authenticated and unauthenticated callers — CVSSv3.1 8.8 (HIGH)

CWECWE 918VNDRoyalTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-16
2026-08-16 05:16Z
HIGH

CVE-2026-16099 — Podlove: The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16099

The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item function in all versions up to, and including, 4.5.3. This makes it possible for authenticated attackers, with contributor-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). A viable POP chain exists within CVSSv3.1 8.8 (HIGH)

CWECWE 502VNDPodloveTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-16
2026-08-16 05:16Z
CRIT

CVE-2026-16098 — ProSolution: The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-16098

The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.0.10 via the proSol_handleFileUpload function. This is due to missing validation of the attacker-controlled Content-Disposition header filename, which overrides the allow-listed multipart filename before the file is saved, and a post-save extension check that fails to delete the already-written file. This makes it possible for unauthenticated attackers CVSSv3.1 9.8 (CRITICAL)

CWECWE 434VNDProsolutionTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-16
2026-08-16 05:16Z
CRIT

CVE-2026-14524 — ProSolution: The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-14524

The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the proSol_fileDeleteProcess function in all versions up to, and including, 2.0.8. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). An attacker must first call the proSol_fileUploadModalProcess handle CVSSv3.1 9.1 (CRITICAL)

CWECWE 22VNDProsolutionTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-16
2026-08-16 05:16Z
HIGH

CVE-2026-14498 — Query: The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-14498

The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_ajax_qw_form_ajax handler, combined with unsanitized attacker-controlled options fully replacing saved query options and being passed directly to call_user_func_array() guarded only by function_exists(). This makes it possible for authenticated CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDQueryTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2026-08-16
2026-08-16 02:16Z
CRIT

CVE-2026-19924 — The manipulation leads to improper authentication.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19924

A security vulnerability has been detected in Tenda AC10 16.03.10.09_multi_TDE01. This vulnerability affects the function R7WebsSecurityHandler of the component httpd. The manipulation leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. CVSSv3.1 9.8 (CRITICAL) · EPSS 57th percentile

CWECWE 287TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73053 — SiYuan: versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73053

SiYuan versions before v3.7.4 contain a cross-site scripting vulnerability in the unicode2Emoji function that fails to sanitize codepoint branch output. Attackers can craft document icons with hex-encoded markup that executes in the renderer with Node integration enabled, achieving arbitrary code execution on the host system. CVSSv3.1 9.0 (CRITICAL) · EPSS 21th percentile

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73052 — SiYuan: before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73052

SiYuan before v3.7.4 stores attribute-view field names without HTML escaping and interpolates them directly into option elements via innerHTML in the sort menu. Attackers can inject markup by renaming a database field to execute arbitrary JavaScript when users open the sort menu, with Node integration enabled in the desktop client enabling code execution. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73050 — SiYuan: versions before v3.7.4 fail to validate or escape the color field in attribute-view

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73050

SiYuan versions before v3.7.4 fail to validate or escape the color field in attribute-view select options, allowing stored cross-site scripting through eight unescaped render sites. Attackers can inject event-handler attributes by including quotation marks in the color value, executing arbitrary JavaScript when viewing databases containing the malicious select field. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73046 — SiYuan: before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73046

SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/* surface, accepts the workspace access code (Conf.AccessAuthCode) as the Basic Auth password but never consults the CAPTCHA/lockout gate or increments the failure counter used by the cookie/session login path. This allows unauthenticated remote attackers to brute-force the admin access code with u CVSSv3.1 9.8 (CRITICAL)

CWECWE 307VNDSiyuanTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73044 — SiYuan: versions before v3.7.4 fail to validate or escape table column width values, allowing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73044

SiYuan versions before v3.7.4 fail to validate or escape table column width values, allowing stored cross-site scripting injection into style attributes. Attackers can inject malicious payloads through the setAttrViewColWidth API that break out of style attributes and inject event handlers on every table cell, executing arbitrary code in the Electron renderer with Node integration enabled. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73043 — SiYuan: versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73043

SiYuan versions before v3.7.4 contain a remote code execution vulnerability in the Template calculation operator, which renders user-authored Go templates and stores output verbatim without sanitization. Attackers can inject malicious HTML and JavaScript into template calculations that execute in the desktop client renderer with Node integration enabled, allowing arbitrary code execution when the database is opened. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73042 — SiYuan: Attackers can inject markup through field descriptions or names that close containing elements and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73042

SiYuan before v3.7.4 fails to properly escape database menu metadata in HTML interpolation, allowing stored values to execute script when users open group, view, or field-edit menus. Attackers can inject markup through field descriptions or names that close containing elements and execute arbitrary code via event handlers, reaching Node built-ins due to Electron's insecure configuration. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 22:16Z
CRIT

CVE-2026-73041 — SiYuan: versions before v3.7.4 fail to validate or escape annotation fields written to disk

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-73041

SiYuan versions before v3.7.4 fail to validate or escape annotation fields written to disk by the setFileAnnotation endpoint. Attackers can inject malicious markup into annotation fields that execute as script in the PDF renderer with full Node.js access when a user opens an annotated PDF. CVSSv3.1 9.0 (CRITICAL)

CWECWE 79VNDSiyuanTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2026-08-15
2026-08-15 19:16Z
CRIT

CVE-2026-18855 — Link: The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-18855

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Exploitation requires the administrator to have enabled the 'Delete local file on CVSSv3.1 9.1 (CRITICAL)

CWECWE 22VNDLinkTYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2026-08-15
2026-08-15 18:16Z
HIGH

CVE-2026-19901 — The manipulation results in hard-coded credentials.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19901

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.1 (HIGH) · EPSS 38th percentile

CWECWE 798CWECWE 259TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-08-15
2026-08-15 18:16Z
CRIT

CVE-2026-19598 — Pods: The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON meta-box-loader compatibility path only writes failures to the PHP error log and re CVSSv3.1 9.8 (CRITICAL)

CWECWE 863VNDPodsTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-08-15
2026-08-15 17:16Z
HIGH

CVE-2026-19900 — The manipulation leads to hard-coded credentials.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-19900

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. CVSSv3.1 8.1 (HIGH)

CWECWE 798CWECWE 259TYPVulnerability
8.1
CVSS v3.1
91
Edit Score