Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-ww49-2fhh-98x8 |
|
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of … | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-qj54-25r3-fmh2 |
|
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML resp… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-q77f-2653-fm5r |
|
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user owns the appoi… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-j943-8rcj-jvf4 |
|
The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-hrxx-hfqm-f933 |
|
The ZFS_IOC_SET_PROP ioctl, used by zfs-set(8), incorrectly validated the calling user such that an… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-gx22-rr34-hq5j |
|
The ZFS_IOC_RECV_NEW ioctl, in the heal receive path, similarly truncated a 64-bit payload size to … | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-gppp-m845-93gc |
|
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in some of … | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-c4f2-w392-72qv |
|
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape a parameter b… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-c2xc-88v3-37g2 |
|
The Broken Link Checker WordPress plugin before 2.4.12 does not limit which query variables it acce… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-92r2-qw8v-3gc8 |
|
The WPS Bidouille WordPress plugin before 1.33.5 does not have proper authorisation checks in an AJ… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-8fxq-m46w-rjrf |
|
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of i… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-7m85-fgv2-gv39 |
|
Certain system calls, such open(2) with the O_TRUNC flag set, and fspacectl(2), could incorrectly f… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-6fvr-wx74-rj2c |
|
The ProSolution WP Client WordPress plugin before 2.0.11 does not sanitise and escape several param… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-5c3c-g52p-xg2h |
|
The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer se… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-4fhc-754f-qxmh |
6.9 (3.1)
|
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacke… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-47hm-j4wc-4fjq |
|
The TrueBooker WordPress plugin before 1.2.7 does not have proper authorisation checks in one of i… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-37mv-8m3x-7xq5 |
|
The TabaPay Gateway WordPress plugin through 1.4.0 does not validate the payment callback before es… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-34m6-mf7c-4crh |
|
The KiviCare WordPress plugin before 4.5.4 does not verify that the requesting user is entitled to… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-2x6x-6h49-pf6q |
|
The Easy Appointments WordPress plugin before 4.0.1 does not restrict one of its appointment-listin… | 2026-08-19T06:31:18Z | 2026-08-19T06:31:18Z |
| ghsa-x5fh-2q2p-vfmf |
|
The Product Shortlist WordPress plugin through 1.0.4 does not properly sanitise and escape a parame… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-x3qv-w3hg-xgc7 |
|
When msync(MS_INVALIDATE) is called on a mapping of an unmanaged device object, the physical pages … | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-w4h6-h99g-8xhr |
8.8 (3.1)
8.7 (4.0)
|
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-w2h3-c2wj-whwm |
|
When the JAIL_AT_DESC flag is specified, kern_jail_set() and kern_jail_get() released the reference… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-v69c-w62v-hmxh |
|
The Easy Media Replace WordPress plugin through 0.2.0 does not sanitise and escape an attachment ti… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-rx4h-9w25-87vh |
|
The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform ca… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-r53w-7mcr-qp2x |
|
The Booking calendar, Appointment Booking System WordPress plugin through 3.2.36 does not properly … | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-qvfr-x6x6-r99q |
|
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of … | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-qv73-xfjm-gc7w |
6.1 (3.1)
5.1 (4.0)
|
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an … | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-qv3g-6665-8589 |
|
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonc… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |
| ghsa-pxq6-g4f4-qq35 |
7.3 (3.1)
5.5 (4.0)
|
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an… | 2026-08-19T06:31:17Z | 2026-08-19T06:31:17Z |