We will see, if and how this will work to address the fashists way of disruption via #Project2025
I whish all the best for #EUVD ❤️
euvd.enisa.europa.eu
We will see, if and how this will work to address the fashists way of disruption via #Project2025
I whish all the best for #EUVD ❤️
euvd.enisa.europa.eu
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL bef...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87892
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.27 does not perform a capability check or validate the destination of a user-supplied feed URL bef...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87892
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 actualbudget
📝 Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resource...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87369
#cybersecurity #infosec #cve #euvd
📊 7.1/10
🏢 actualbudget
📝 Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resource...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87369
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87932
#cybersecurity #infosec #cve #euvd
📊 6.9/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87932
#cybersecurity #infosec #cve #euvd
📊 10.0/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87780
#cybersecurity #infosec #cve #euvd
📊 10.0/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87780
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85806
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not verify ownership or authorization before returning a campaign's stored configuration a...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85806
#cybersecurity #infosec #cve #euvd
📊 9.4/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87778
#cybersecurity #infosec #cve #euvd
📊 9.4/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87778
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 acymailing.com
📝 Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87773
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 acymailing.com
📝 Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87773
#cybersecurity #infosec #cve #euvd
📊 9.2/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87781
#cybersecurity #infosec #cve #euvd
📊 9.2/10
🏢 lomart.fr
📝 Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87781
#cybersecurity #infosec #cve #euvd
📊 7.0/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `image...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87931
#cybersecurity #infosec #cve #euvd
📊 7.0/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `image...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87931
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87928
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87928
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping cart...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87929
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping cart...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87929
#cybersecurity #infosec #cve #euvd
📊 9.5/10
🏢 acymailing.com
📝 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIM...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87772
#cybersecurity #infosec #cve #euvd
📊 9.5/10
🏢 acymailing.com
📝 Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIM...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87772
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85805
#cybersecurity #infosec #cve #euvd
📊 n/a
🏢 Unknown
📝 The WPeMatico RSS Feed Fetcher WordPress plugin before 2.8.26 does not sanitize and escape content it retrieves from a user-supplied source before rendering ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85805
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 Wikimedia Foundation
📝 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87345
#cybersecurity #infosec #cve #euvd
📊 5.3/10
🏢 Wikimedia Foundation
📝 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki -...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87345
#cybersecurity #infosec #cve #euvd
📊 9.3/10
🏢 joomlaboat.com
📝 Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video se...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87771
#cybersecurity #infosec #cve #euvd
📊 9.3/10
🏢 joomlaboat.com
📝 Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3 - An SQL injection vulnerability in video se...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87771
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 pnpm
📝 pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy setti...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87974
#cybersecurity #infosec #cve #euvd
📊 8.3/10
🏢 pnpm
📝 pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy setti...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87974
#cybersecurity #infosec #cve #euvd
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
📊 8.7/10
📝 Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87718
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87930
#cybersecurity #infosec #cve #euvd
📊 5.1/10
🏢 svenbluege.de
📝 Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site ...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87930
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 getgrav
📝 Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config (I...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87763
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 getgrav
📝 Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In webserver-configs/web.config (I...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87763
#cybersecurity #infosec #cve #euvd