CVE-2026-40xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
828 records · Page 3 of 9
Unauthenticated Cross Site Scripting (XSS) in WP Time Slots Booking Form <= 1.2.46 versions.
UpdatedSubscriber Sensitive Data Exposure in WP SMS <= 7.2.1 versions.
UpdatedUnauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.
UpdatedSubscriber Broken Access Control in ChatBot <= 7.9.7 versions.
UpdatedUnauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions.
Updated- CVE-2026-40786: WordPress MyRewards plugin <= 5.7.3 - Broken Access Control vulnerability 4.3 Medium
Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: from n/a through <= 5.7.3.
Updated - CVE-2026-40785: WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability 7.1 High
Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.
Updated Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentBoards: from n/a through <= 1.91.2.
Updated- CVE-2026-40783: WordPress Blocksy Companion Pro plugin <= 2.1.37 - Remote Code Execution (RCE) vulnerability 9.9 Critical
Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions.
Updated - CVE-2026-40782: WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability 6.5 Medium
Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.
Updated Unauthenticated Broken Authentication in ReviewX <= 2.3.6 versions.
UpdatedAuthentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.
Updated- CVE-2026-40779: WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability 7.7 High
Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.
Updated - CVE-2026-40778: WordPress Majestic Support plugin <= 1.1.2 - Broken Access Control vulnerability 5.3 Medium
Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through <= 1.1.2.
Updated Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
UpdatedUnauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions.
UpdatedUnauthenticated Broken Access Control in Royal MCP <= 1.4.2 versions.
Updated- CVE-2026-40774: WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability 7.5 High
Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions.
Updated Subscriber Broken Access Control in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.9 versions.
Updated- CVE-2026-40772: WordPress GeekyBot plugin <= 1.2.2 - Arbitrary File Upload vulnerability 10.0 Critical
Unauthenticated Arbitrary File Upload in GeekyBot <= 1.2.2 versions.
Updated - CVE-2026-40771: WordPress Contest Gallery plugin <= 28.1.6 - SQL Injection vulnerability 9.3 Critical
Unauthenticated SQL Injection in Contest Gallery <= 28.1.6 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions.
UpdatedUnauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field <= 1.0.6 versions.
UpdatedUnauthenticated Insecure Direct Object References (IDOR) in Salon booking system <= 10.30.24 versions.
Updated- CVE-2026-40767: WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability 7.5 High
Unauthenticated Broken Access Control in wpForo Forum < 3.0.2 versions.
Updated Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions.
Updated- CVE-2026-40765: WordPress collectchat plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in collectchat <= 2.4.9 versions.
Updated Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form by WPForms: from n/a through <= 1.10.0.2.
UpdatedMissing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royal Elementor Addons: from n/a through <= 1.7.1056.
UpdatedUnauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.
UpdatedUnauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
UpdatedUnauthenticated PHP Object Injection in Behold <= 1.5 versions.
UpdatedUnauthenticated PHP Object Injection in Esmée <= 1.4 versions.
UpdatedUnauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
UpdatedUnauthenticated PHP Object Injection in Château <= 1.2.1 versions.
UpdatedUnauthenticated PHP Object Injection in Zoya <= 1.4 versions.
UpdatedUnauthenticated PHP Object Injection in TechLink <= 1.3 versions.
UpdatedUnauthenticated PHP Object Injection in Roisin <= 1.4 versions.
UpdatedUnauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.
Updated- CVE-2026-40752: WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability 8.1 High
Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.
Updated Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
Updated- CVE-2026-40750: WordPress Kids Online Store theme <= 0.8.9 - Arbitrary File Upload vulnerability 9.9 Critical
Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online Store allows Upload a Web Shell to a Web Server. This issue affects Kids Online Store: from n/a through 0.8.9.
Updated - CVE-2026-40749: WordPress Charity Zone theme <= 1.1.1 - Arbitrary File Upload vulnerability 9.9 Critical
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.
Updated - CVE-2026-40748: WordPress Kids Gift Shop theme <= 0.5.4 - Arbitrary File Upload vulnerability 9.9 Critical
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.
Updated - CVE-2026-40747: WordPress Ecommerce Zone theme <= 0.9.7 - Arbitrary File Upload vulnerability 9.9 Critical
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.
Updated - CVE-2026-40746: WordPress Restaurant Zone theme <= 0.7.8 - Arbitrary File Upload vulnerability 9.9 Critical
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.
Updated Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a through <= 8.4.2.
UpdatedImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows Blind SQL Injection.This issue affects Beaver Builder: from n/a through <= 2.10.1.2.
Updated- CVE-2026-40743: WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability 6.5 Medium
Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.
Updated - CVE-2026-40742: WordPress Nelio AB Testing plugin <= 8.2.8 - Sensitive Data Exposure vulnerability 5.3 Medium
Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nelio AB Testing: from n/a through <= 8.2.8.
Updated Unauthenticated Broken Access Control in Redsys for WooCommerce Light <= 7.0.0 versions.
Updated- CVE-2026-40740: WordPress Tutor LMS plugin <= 3.9.7 - Broken Access Control vulnerability 5.4 Medium
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.
Updated Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.
UpdatedUnauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.
UpdatedAuthorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects COMPE: from n/a through <= 1.1.4.
UpdatedUnauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
UpdatedUnauthenticated PHP Object Injection in Reina <= 2.1 versions.
UpdatedImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zahlan Categories Images categories-images allows DOM-Based XSS.This issue affects Categories Images: from n/a through <= 3.3.1.
UpdatedUnauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.
UpdatedUnauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5 versions.
UpdatedUnauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.
UpdatedMissing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeGrill Demo Importer: from n/a through <= 2.0.0.6.
UpdatedMissing Authorization vulnerability in bPlugins 3D viewer – Embed 3D Models 3d-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D viewer – Embed 3D Models: from n/a through <= 1.8.5.
Updated- CVE-2026-40728: WordPress Magazine Blocks plugin <= 1.8.3 - Broken Access Control vulnerability 4.3 Medium
Missing Authorization vulnerability in BlockArt Magazine Blocks magazine-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Magazine Blocks: from n/a through <= 1.8.3.
Updated Sales Representative Arbitrary File Deletion in Groundhogg <= 4.4 versions.
UpdatedUnauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.
Updated- CVE-2026-40725: WordPress WooCommerce Product Filters plugin < 2.0.6 - PHP Object Injection vulnerability 9.8 Critical
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
Updated CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions.
Updated- CVE-2026-40723: WordPress Bricks Builder theme <= 2.1.4 - Broken Access Control vulnerability 4.3 Medium
Subscriber Broken Access Control in Bricks Builder <= 2.1.4 versions.
Updated - CVE-2026-40722: WordPress Yoast SEO Premium plugin <= 26.6 - Broken Access Control vulnerability 5.5 Medium
Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: from n/a through 26.6.
Updated - CVE-2026-40721: WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability 7.5 High
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in Royal Elementor Addons Pro < 1.7.1041 versions.
UpdatedDeadwood in MaraDNS 3.5.0036 allows attackers to exhaust connection slots via a zone whose authoritative nameserver address cannot be resolved.
UpdatedDell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
UpdatedDell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
UpdatedDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
UpdatedDell ThinOS 10, versions prior to ThinOS10 2602_10.0765, contain an Improper Access control vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information exposure.
UpdatedDell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
UpdatedDell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
UpdatedIn NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in acls.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered on the READ path (stat, readdir, open) when processing a security descriptor with multiple ACCESS_DENIED ACEs containing WRITE_OWNER from distinct
UpdatedA cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
UpdatedWebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that no authentication is required, this can lead to privilege escalation and potentially compromise the security of the entire system.
UpdatedNGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_ocsp directive is set to "on" or the leaf parameters are configured with a resolver. With this configuration, an unauthenticated attacker can send requests along with conditions beyond its control that may cause a heap-use-after-free
UpdatedA vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
UpdatedA vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Resource Administrator role can create SNMP configuration objects through iControl REST or the TMOS shell (tmsh) resulting in privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
UpdatedIn Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound the reply length against the destination buffer size. The size clamp that protects the UDP path is not applied on the TCP path, so a reply larger than 65504 bytes is shifted forward by 48 bytes inside a buffer of capacity equal to 'msg-buffer-size', w
UpdatedThe asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope. Users are recommended to upgrade to version 3.2.1, which fixes this issue.
UpdatedAn out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requests.
UpdatedIn Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.
UpdatedIn Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.
UpdatedIn Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \ skipping.
UpdatedIn Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.
UpdatedIn OpenStack Keystone before 28.0.1, the LDAP identity backend does not convert the user enabled attribute to a boolean when the user_enabled_invert configuration option is False (the default). The _ldap_res_to_model method in the UserApi class only performed string-to-boolean conversion when user_enabled_invert was True. When False, the raw string value from LDAP (e.g., "FALSE") was used directly
UpdatedXML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURE_SECURE_PROCESSING or disabling DTD processing. When create(InputStream, EntryInserter) is invoked, the only featu
UpdatedThe use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
UpdatedDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering.
UpdatedDell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
UpdatedDell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
UpdatedDell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.
UpdatedDell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering.
Updated