Total
9919 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-12432 | 2026-06-29 | N/A | 5.3 MEDIUM | ||
| The WP Full Stripe Free plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.4.3 via the wpfs_update_failed_payment_status AJAX action. The handler is registered through both wp_ajax_ and wp_ajax_nopriv_ hooks and the underlying update_failed_payment_status() function performs no capability check, no nonce verification, and no logged-in check before calling $this->db->updatePaymentByEventId() with attacker-controlled POST parameters. This makes it possible for unauthenticated attackers who can obtain a valid Stripe Payment Intent ID for the target site (Payment Intent IDs are exposed to the customer browser during normal Stripe.js checkout flows) to manipulate payment records in the site's database, marking previously successful payments as failed and overwriting failure codes and messages with attacker-supplied values. | |||||
| CVE-2026-57327 | 2026-06-29 | N/A | 6.3 MEDIUM | ||
| Subscriber Broken Access Control in MainWP <= 6.1.1 versions. | |||||
| CVE-2026-57339 | 2026-06-29 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Business Directory <= 6.4.23 versions. | |||||
| CVE-2026-57332 | 2026-06-29 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions. | |||||
| CVE-2026-57340 | 2026-06-29 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Japanized For WooCommerce <= 2.9.12 versions. | |||||
| CVE-2026-57334 | 2026-06-29 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in WP User Frontend <= 4.3.7 versions. | |||||
| CVE-2026-54844 | 2026-06-29 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in CheckView Automated Testing <= 2.1.0 versions. | |||||
| CVE-2026-54835 | 2026-06-29 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Five Star Restaurant Menu <= 2.5.2 versions. | |||||
| CVE-2026-54830 | 2026-06-29 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Five Star Restaurant Reservations <= 2.7.19 versions. | |||||
| CVE-2026-27366 | 2026-06-29 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions. | |||||
| CVE-2026-20189 | 1 Cisco | 1 Prime Infrastructure | 2026-06-29 | N/A | 4.3 MEDIUM |
| A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This vulnerability is due to insufficient authorization checks on the download service API. An attacker could exploit this vulnerability by submitting a crafted URL request to an affected device. A successful exploit could allow the attacker to download sensitive log files that they would otherwise not have authorization to access. To exploit this vulnerability, the attacker must have valid credentials to access the web-based management interface of the affected device. | |||||
| CVE-2026-56061 | 2026-06-29 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Subscriptions for WooCommerce <= 1.9.5 versions. | |||||
| CVE-2026-55189 | 2026-06-29 | N/A | 7.7 HIGH | ||
| RustFS is a distributed object storage system built in Rust. From 1.0.0-alpha.1 until 1.0.0-beta.9, when the FTP frontend is enabled, the FTP read and probe handlers dispatch directly to the storage backend without ever calling the IAM authorization function that the FTP write/list handlers (and the entire HTTP S3 path) use. As a result, any user who can authenticate to the FTP listener — including a user whose IAM policy contains an explicit Deny on s3:GetObject — can read (RETR) and stat (SIZE/MDTM) any object in any bucket, and probe any bucket (CWD), completely regardless of their IAM policy. This vulnerability is fixed in 1.0.0-beta.9. | |||||
| CVE-2026-54029 | 1 Librechat | 1 Librechat | 2026-06-29 | N/A | 5.3 MEDIUM |
| LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the DELETE /api/messages/:conversationId/:messageId endpoint allows any authenticated user to delete any other user's messages. The validateMessageReq middleware only validates that the conversationId belongs to the requesting user, but the handler calls deleteMessages({ messageId }) using only the messageId as the MongoDB filter — without adding a user constraint. An attacker provides their own valid conversationId (to pass validation) and the victim's messageId (to target deletion), resulting in permanent, irrecoverable message deletion. This vulnerability is fixed in 0.8.4-rc1. | |||||
| CVE-2025-30398 | 1 Microsoft | 2 Nuance Powerscribe 360, Nuance Powerscribe One | 2026-06-29 | N/A | 8.1 HIGH |
| Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-57660 | 2026-06-29 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. | |||||
| CVE-2026-57654 | 2026-06-29 | N/A | 6.5 MEDIUM | ||
| Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. | |||||
| CVE-2026-57648 | 2026-06-29 | N/A | 4.3 MEDIUM | ||
| Contributor Broken Access Control in Nelio Content <= 4.3.4 versions. | |||||
| CVE-2026-49991 | 2026-06-29 | N/A | 8.6 HIGH | ||
| RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject permission on their own bucket can exploit a path traversal vulnerability in the Snowball auto-extract feature to write arbitrary objects into other users' buckets, completely breaking multi-tenant isolation. The vulnerability chains three flaws: No ../ sanitization in tar entry key normalization; IAM wildcard matching uses raw (uncleaned) paths; and Filesystem path cleaning resolves ../ across bucket boundaries. | |||||
| CVE-2026-48941 | 1 Joomlaworks | 1 K2 | 2026-06-28 | N/A | 6.5 MEDIUM |
| The K2 frontend `item.checkin` task accepts an unauthenticated `sigProFolder` query parameter and uses it directly to address a `JFolder::delete()` call under `/media/k2/galleries/` | |||||