CVE-2026-92000 to CVE-2026-92999

122 CVEs with public proof-of-concept exploits.

• CVE-2026-920841 PoCBeaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output
• CVE-2026-920992 PoCsWPGraphQL Smart Cache < 2.3.2 - Unauthenticated Persisted Query Registration and Alias Squatting
• CVE-2026-921641 PoCStreamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files
• CVE-2026-922211 PoCgedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien sql injection
• CVE-2026-922291 PoCForminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter
• CVE-2026-922472 PoCssynaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
• CVE-2026-923641 PoCitsourcecode Leave Management System index.php sql injection
• CVE-2026-923661 PoCcode-projects Matrimonial System Regular Search search.php sql injection
• CVE-2026-923801 PoCWuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery
• CVE-2026-923811 PoCPbootCMS Template Rendering ContentController.php decode_string cross site scripting
• CVE-2026-923831 PoCPbootCMS User Management UserController.php mod cross-site request forgery
• CVE-2026-923851 PoCSourceCodester Online Food Ordering System Category Update update_category.php cross site scripting
• CVE-2026-923921 PoCHTTP/2 upload Use-After-Free
• CVE-2026-923971 PoCRuijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection
• CVE-2026-923981 PoCRuijie RG-EW3000GX user_list_note admin os command injection
• CVE-2026-923991 PoCGPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow
• CVE-2026-924001 PoCPayment Gateway for PayPal on WooCommerce < 9.2.1 - Unauthenticated Payment Bypass via Sandbox IPN Environment Confusion
• CVE-2026-924031 PoCSecure Custom Fields < 6.9.4 - Unauthenticated Post Modification via Front-End Form ID Substitution
• CVE-2026-924041 PoCMgoSync 2.1.5 - 2.1.6 - Unauthenticated WooCommerce API Credential Disclosure
• CVE-2026-924051 PoCSourceCodester Inventory and Monitoring System index.php sql injection
• CVE-2026-924061 PoCSourceCodester Inventory and Monitoring System btn_functions.php add sql injection
• CVE-2026-924091 PoCDonation Thermometer 2.2.9 - 2.2.11 - Contributor+ Stored XSS via Shortcode
• CVE-2026-924101 PoCSign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF
• CVE-2026-924111 PoCWP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag Name
• CVE-2026-924121 PoCFive Star Restaurant Reviews < 2.3.14 - Reflected XSS
• CVE-2026-924131 PoCArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
• CVE-2026-924181 PoCChangeWeDer crm Save Endpoint customer.serve.js cross site scripting
• CVE-2026-924201 PoCHydra Booking < 1.2.2 - Hydra Host+ Cross-Host Booking Deletion and Modification via IDOR
• CVE-2026-924211 PoCHydra Booking 1.1.0 - < 1.2.3 - Hydra Host+ Host Profile Takeover via IDOR
• CVE-2026-924221 PoCMeow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load_gallery_collection REST Route
• CVE-2026-924231 PoCMeow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts
• CVE-2026-924241 PoCContent Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue
• CVE-2026-924251 PoCHydra Booking < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion via IDOR
• CVE-2026-924261 PoCYITH WooCommerce Popup < 1.60.0 - Contributor+ Arbitrary Post Meta Deletion
• CVE-2026-924271 PoCCoinsnap Bitcoin Crowdfunding <= 1.2.0 - Unauthenticated Payment Record Forgery via Webhook Secret Disclosure
• CVE-2026-924281 PoCRede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure Webhook
• CVE-2026-924291 PoCRede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit Webhook
• CVE-2026-924301 PoCRede Itaú for WooCommerce < 5.4.7 - Unauthenticated Order Status Manipulation via PIX Webhook
• CVE-2026-924311 PoCPatreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
• CVE-2026-924321 PoCPatreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter
• CVE-2026-924331 PoCPatreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
• CVE-2026-924351 PoCMailchimp for WooCommerce < 6.1.1 - Unauthenticated Broken Access Control in REST API
• CVE-2026-924361 PoCMailchimp for WooCommerce < 6.3 - Unauthenticated Customer Email and Cart Disclosure via IDOR
• CVE-2026-924371 PoCMailchimp for WooCommerce < 6.3 - Unauthenticated Abandoned Cart Modification and Deletion
• CVE-2026-924381 PoCNinja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin
• CVE-2026-924551 PoCyshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints
• CVE-2026-924561 PoCyshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints
• CVE-2026-924571 PoCyshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice
• CVE-2026-924581 PoCyshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale
• CVE-2026-924591 PoCyshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint
• CVE-2026-924601 PoCyshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing
• CVE-2026-924611 PoCyshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint
• CVE-2026-924621 PoCyshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep
• CVE-2026-924631 PoCyshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing
• CVE-2026-924661 PoCmicroservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
• CVE-2026-924671 PoCmicroservices-platform through 6.0.0 Unverified Password Change via /users/password
• CVE-2026-924681 PoCmicroservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
• CVE-2026-924691 PoCmicroservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check
• CVE-2026-924721 PoCGPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
• CVE-2026-924731 PoCGPAC BIFS commands.c gf_sg_command_del use after free
• CVE-2026-924741 PoCGPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free
• CVE-2026-924751 PoCGPAC downloader.c wait_for_header_and_parse out-of-bounds
• CVE-2026-925261 PoCitsourcecode Leave Management System index.php sql injection
• CVE-2026-925271 PoCchatwoot Shopify OAuth callbacks_controller.rb server-side request forgery
• CVE-2026-925401 PoCImport and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users
• CVE-2026-925411 PoCImport and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer
• CVE-2026-925551 PoCDatabase Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel
• CVE-2026-925921 PoCCraft CMS before 4.18.6 Remote Code Execution via signed cookie
• CVE-2026-926801 PoCAraxis Merge insufficiently protected credentials
• CVE-2026-927641 PoCOpenCVE 2.4.0 < 3.1.0 Organization API Ignores Token Scope
• CVE-2026-927701 PoCHarbor through 2.15.2 Scanner Credential Disclosure via Query Parameter
• CVE-2026-927741 PoCWiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission
• CVE-2026-927751 PoCWiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch
• CVE-2026-927761 PoCWiki.js through 2.5.314 Path Prefix Matching Authorization Bypass
• CVE-2026-927961 PoCManticore Search 27.0.0 before 28.4.4 Multi-Statement Authorization Bypass
• CVE-2026-928001 PoCDocs before 5.4.1 Stale Collaboration Session After Access Revocation
• CVE-2026-928061 PoCphpList before 3.6.17 Cross-Site Request Forgery via massremove.php
• CVE-2026-928091 PoCPrestaShop psgdpr through 1.4.3 GDPR Log Forgery
• CVE-2026-928101 PoCPrestaShop blockwishlist through 3.0.2 Information Disclosure
• CVE-2026-928111 PoCbrowserless 1.44.0 through 2.56.7 File Protocol Restriction Bypass
• CVE-2026-928121 PoCdecap-server Path Traversal via Sibling Directory Prefix Matching
• CVE-2026-928131 PoCMetabase through 0.63.18 SSRF via GeoJSON URL validation bypass
• CVE-2026-928141 PoCchangedetection.io through 0.60.6 Cross-Site Scripting via watch_title
• CVE-2026-928151 PoCchangedetection.io through 0.60.6 SSRF via browser-step Goto URL
• CVE-2026-928161 PoCComfyUI before 0.30.0 Path Traversal via dataset save nodes
• CVE-2026-928831 PoCImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
• CVE-2026-929181 PoCadmin3 through 3.0.0 Session Token Disclosure via Audit Log
• CVE-2026-929191 PoCadmin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filename
• CVE-2026-929201 PoCadmin3 through 3.0.0 Session Not Invalidated When a User Account Is Disabled
• CVE-2026-929211 PoCadmin3 through 3.0.0 Weak Password Hashing via Single-Round MD5
• CVE-2026-929231 PoCUnlimited Elements For Elementor 1.5.142 - 2.0.20 - Subscriber+ SQLi via get_addon_output_data
• CVE-2026-929241 PoCUnlimited Elements For Elementor < 2.0.21 - Subscriber+ Arbitrary Shortcode Execution via get_addon_output_data
• CVE-2026-929261 PoCcode-projects Matrimonial System partner_preference.php writepartnerprefs sql injection
• CVE-2026-929271 PoCSourceCodester Drug Recommendation System drug_recommendor.sql information disclosure
• CVE-2026-929331 PoCvm2 before 3.11.8 Information Disclosure via util.getCallSites
• CVE-2026-929351 PoCvm2 NodeVM Remote Code Execution via Array-Shaped Require
• CVE-2026-929361 PoCvm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack
• CVE-2026-929371 PoCvm2 3.11.6 Remote Code Execution via Promise call/apply
• CVE-2026-929381 PoCvm2 3.11.3 through 3.11.6 Remote Code Execution via node:sqlite
• CVE-2026-929391 PoCvm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
• CVE-2026-929401 PoCvm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent
• CVE-2026-929411 PoCvm2 3.11.3 before 3.11.7 TLS Trust Store Manipulation
• CVE-2026-929421 PoCvm2 before 3.11.7 Timeout Bypass via FinalizationRegistry
• CVE-2026-929441 PoCvm2 3.10.2 through 3.11.6 Sandbox Escape via Promise Protector
• CVE-2026-929461 PoCvm2 before 3.11.7 Remote Code Execution via require.external
• CVE-2026-929471 PoCvm2 before 3.11.7 Memory Disclosure via Buffer Pool
• CVE-2026-929481 PoCvm2 3.9.6 through 3.11.5 Sandbox Escape via node:test
• CVE-2026-929491 PoCvm2 3.9.6 before 3.11.7 Sandbox Bypass via Accessor Descriptor
• CVE-2026-929501 PoCvm2 before 3.11.7 Sandbox Escape via CLI require
• CVE-2026-929511 PoCvm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver
• CVE-2026-929531 PoCvm2 3.11.0 through 3.11.7 Prototype Pollution via TypedArray
• CVE-2026-929561 PoCvm2 3.10.1 through 3.11.6 Sandbox Escape via WebAssembly.compileStreaming
• CVE-2026-929591 PoCvm2 before 3.11.8 allowAsync Bypass via Promise Thenable
• CVE-2026-929651 PoCTikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption
• CVE-2026-929661 PoCAppointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field
• CVE-2026-929891 PoCSendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing
• CVE-2026-929901 PoCSendPress <= 1.26.1.20 - Unauthenticated Newsletter Sending Log Disclosure via Hardcoded Token
• CVE-2026-929921 PoCDromara mayfly-go AI Assistant ai.go authorization
• CVE-2026-929931 PoCDromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection
• CVE-2026-929941 PoCVerge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage API
• CVE-2026-929951 PoCVerge3D <= 4.13.0 - Unauthenticated Product Download Disclosure via v3d_download_file
• CVE-2026-929961 PoCVerge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done