آخرین آسیب‌پذیری‌ها

Essential Addons for Elementor 6.6.0 - 6.8.7 - Author+ Privilege Escalation via register_user_role

Payment Forms for Paystack < 4.0.6 - Contributor+ Sensitive Information Disclosure via Settings Page

PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scripting via '[ppwp]' Shortcode 'desc_below_form' Attribute via Placeholder Marker Collision

Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tag

Spectra Gutenberg Blocks <= 2.20.4 - Missing Authorization to Unauthenticated Limited Theme File Deletion and Modification via 'page', 'path', and 'settings' GET Parameters

Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-Site Scripting via 'extra' Parameter via Metadata Key Normalization

WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution

Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-Site Scripting via HTML Parser Quote-Metadata Desynchronization

Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment `title` Attribute via Shutter Lightbox innerHTML

Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_name

SoftIron HyperCloud: OS Command Injection in Orchestrator via Virtual Machine Template Fields

File Force Download for Drupal 7 Access Bypass via Unconditional Download Headers

Field Collection for Drupal 7 access bypass via missing parent entity access check

Unverified Sign in with Apple callback parameter can override verified ID token claims

Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps

secp256k1-native: Compiler-reconstructed secret-dependent branch in native scalar multiplication

Coop sessions are not invalidated on password reset

Coop has SAML cross-tenant authentication bypass

Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser

Coop has a data leak via unauthenticated GraphQL Query.allOrgs

Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg

i18next: Shared built-in corruption through inherited-key deepExtend recursion

IXP Manager has authenticated non-administrator privilege escalation

IXP Manager has Broken Object-Level Authorization

OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution