🔥 Trending CVEs - Last 90 Days

This vulnerability in Vega visualization library allows arbitrary JavaScript execution via DOM-based XSS when applications meet two conditions: they a...

This vulnerability in Coolify allows attackers to hijack password reset emails by manipulating the host header. When victims click malicious reset lin...

A buffer overflow vulnerability in QNAP operating systems allows authenticated remote attackers to modify memory or crash processes. This affects QNAP...

A buffer overflow vulnerability in QNAP operating systems allows authenticated remote attackers to modify memory or crash processes. This affects user...

A buffer overflow vulnerability in QNAP operating systems allows authenticated remote attackers to modify memory or crash processes. This affects user...

This vulnerability allows attackers to include local PHP files through improper filename control in the Lekker WordPress theme. Attackers can potentia...

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in the Eagle Booking WordPress plugin that allows attackers to bypass auth...

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in the Google Calendar Events WordPress plugin. Attackers can bypass autho...

This CVE describes a Missing Authorization vulnerability in the WeDesignTech Portfolio WordPress plugin that allows attackers to bypass access control...

This vulnerability allows attackers to bypass authorization controls in the DesignThemes LMS Addon WordPress plugin, potentially accessing restricted ...

This vulnerability in Delta Electronics DVP-12SE11T PLC allows attackers to bypass authentication by obtaining partial password information through im...

This vulnerability allows attackers to decrypt session cookies and steal authentication credentials in SiYuan Note software. Attackers who intercept s...

This CVE describes a Missing Authorization vulnerability in the WordPress Editorial Calendar plugin that allows attackers to bypass access controls. A...

This CVE describes a missing authorization vulnerability in the totalsoft TS Poll WordPress plugin (poll-wp) that allows attackers to exploit incorrec...

This CVE describes a Missing Authorization vulnerability in the WP Telegram Widget and Join Link WordPress plugin that allows attackers to bypass acce...

This CVE describes a Missing Authorization vulnerability in the Simple File List WordPress plugin that allows attackers to bypass access controls. It ...

This CVE describes a Missing Authorization vulnerability in the Opinion Stage Poll, Survey & Quiz Maker WordPress plugin that allows attackers to bypa...

This vulnerability allows attackers to bypass authorization controls in the FV Simpler SEO WordPress plugin, potentially accessing administrative func...

This CVE describes a missing authorization vulnerability in YITH Slider for page builders WordPress plugin that allows attackers to bypass access cont...

This CVE describes a missing authorization vulnerability in the Watu Quiz WordPress plugin that allows attackers to bypass access controls. Attackers ...

This CVE describes a missing authorization vulnerability in the Addonify Quick View WordPress plugin that allows attackers to bypass access controls. ...

This CVE describes a Missing Authorization vulnerability in the Tablesome WordPress plugin that allows attackers to bypass access controls. It affects...

This CVE describes a Missing Authorization vulnerability in the Spiffy Calendar WordPress plugin that allows attackers to bypass access controls. It a...

This vulnerability allows attackers to bypass authorization controls in WP Swings Membership For WooCommerce by manipulating user-controlled keys, pot...

The Beaver Builder WordPress plugin has an authorization bypass vulnerability that allows authenticated users with Subscriber-level access or higher t...

The Redirection for Contact Form 7 WordPress plugin allows unauthenticated attackers to upload arbitrary files to the server due to missing file type ...

Advantech WebAccess/SCADA is vulnerable to directory traversal that allows attackers to delete arbitrary files on the system. This affects industrial ...

This path traversal vulnerability allows authenticated users with limited privileges to upload malicious Arc data archives that can write arbitrary fi...

This vulnerability allows attackers to include arbitrary local files through PHP's include/require statements in the Inset WordPress theme. Attackers ...

This CVE describes a PHP Local File Inclusion vulnerability in the Traveler WordPress theme. Attackers can include arbitrary local files on the server...

This vulnerability allows attackers to include local files on the server through improper input validation in PHP include/require statements. It affec...

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affec...

This vulnerability allows attackers to include local PHP files through improper filename control in the MinimogWP WordPress theme, potentially leading...

This vulnerability allows attackers to include local files on the server through PHP's include/require statements, potentially leading to remote code ...

This CVE describes a PHP Local File Inclusion vulnerability in the Kicker WordPress theme by axiomthemes. Attackers can include arbitrary local files ...

This vulnerability allows attackers to include and execute arbitrary local files on the server via PHP's include/require statements in the Renewal Wor...

This CVE describes a PHP Local File Inclusion vulnerability in the Pinevale WordPress theme. Attackers can include arbitrary local files through impro...

This vulnerability allows attackers to include local PHP files through improper filename control in the Katelyn WordPress theme. Attackers can potenti...

This CVE describes a PHP Local File Inclusion vulnerability in the Giardino WordPress theme that allows attackers to include arbitrary local files thr...

This vulnerability allows attackers to include local PHP files through improper filename control in the Winger WordPress theme. Attackers can potentia...

This CVE describes a PHP Local File Inclusion vulnerability in the DJ Rainflow WordPress theme. Attackers can include arbitrary local files from the s...

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affec...

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affec...

This CVE describes a PHP Local File Inclusion vulnerability in the Pubzinne WordPress theme. Attackers can include arbitrary local files through impro...

This vulnerability allows attackers to include local files on the server through improper filename control in PHP include/require statements. It affec...

This CVE describes a PHP Local File Inclusion vulnerability in the IPharm WordPress theme. Attackers can include arbitrary local files through imprope...

This vulnerability allows attackers to include local files on the server through improper input validation in the Tripster WordPress theme. Attackers ...

This CVE describes a PHP Local File Inclusion vulnerability in the Chinchilla WordPress theme. Attackers can include arbitrary local files through imp...

This vulnerability allows attackers to include local PHP files through improper filename control in the Wanderic WordPress theme. Attackers can potent...

This vulnerability allows attackers to include local PHP files through improper filename control in the Fribbo WordPress theme. Attackers can potentia...