Threat database

14 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2026-111828Classified Listing · Improper Validation of Specified Quantity in Input Medium4.3EPSS 0.2%2026-10-19CVE Database V5CVE-2026-111828 Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-19
High	8.1	EPSS 0.4%	CVE-2026-40777WPSection · Missing Authorization High8.1EPSS 0.4%2026-10-10CVE Database V5CVE-2026-40777 CVE-2026-40777 is a high-severity vulnerability in Rashid WPSection versions up to 1.5.1 that involves missing authorization controls. This broken access control flaw allows users with limited privileges to perform unauthorized actions, impacting the integrity and availability of the affected system. No specific affected versions beyond "<= 1.5.1" are detailed, and no patch or remediation information is provided. EPSS 0.4%Vulnerability Rashid #cwe-862	CVE Database V5	2026-10-10
Medium	6.5	EPSS 0.2%	CVE-2026-94665Classified Listing · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Mamunur Rashid… Medium6.5EPSS 0.2%2026-10-09CVE Database V5CVE-2026-94665 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-09
High	7.1	EPSS 0.2%	CVE-2026-95596ShopBuilder – Elementor WooCommerce Builder Addons · Cross-site Scripting High7.1EPSS 0.2%2026-10-09CVE Database V5CVE-2026-95596 CVE-2026-95596 is a reflected cross-site scripting (XSS) vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons. It affects versions from 0 up to but not including 3.4.2. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to execute malicious scripts in the context of the affected web application. The CVSS 3.1 score is 7.1, indicating a high severity level. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-09
Medium	6.5	EPSS 0.2%	CVE-2026-97280Review Schema · Missing Authorization Medium6.5EPSS 0.2%2026-10-01CVE Database V5CVE-2026-97280 Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0. EPSS 0.2%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-10-01
Medium	5.4	EPSS 0.3%	CVE-2026-84217Classified Listing · Missing Authorization Medium5.4EPSS 0.3%2026-09-02CVE Database V5CVE-2026-84217 Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.3. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862 #ghsa-gh5v-3gj8-m99h	CVE Database V5	2026-09-02
High	7.1	EPSS 0.3%	CVE-2026-42658Classified Listing · Cross-site Scripting High7.1EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42658 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-79	CVE Database V5	2026-06-15
Medium	6.3	EPSS 0.3%	CVE-2026-42651Classified Listing · Missing Authorization Medium6.3EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42651 Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.3%	CVE-2026-42640Classified Listing · Missing Authorization Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42640 Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.4%	CVE-2026-42679Classified Listing · Path Traversal Medium6.5EPSS 0.4%2026-06-01CVE Database V5CVE-2026-42679 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n/a through 5.3.8. EPSS 0.4%Vulnerability Mamunur Rashid #cwe-22	CVE Database V5	2026-06-01
Medium	4.3	EPSS 0.3%	CVE-2026-49054The Post Grid · Missing Authorization Medium4.3EPSS 0.3%2026-05-27CVE Database V5CVE-2026-49054 Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-05-27
Medium	4.3	EPSS 0.3%	CVE-2025-31529Slider Path for Elementor · Missing Authorization Medium4.3EPSS 0.3%2025-03-31CVE Database V5CVE-2025-31529 Missing Authorization vulnerability in Rashid Slider Path for Elementor slider-path allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Slider Path for Elementor: from n/a through <= 3.0.0. EPSS 0.3%Vulnerability Rashid	CVE Database V5	2025-03-31
Critical	9.8	EPSS 0.9%	CVE-2025-28916Docpro · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… Critical9.8EPSS 0.9%2025-03-26CVE Database V5CVE-2025-28916 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rashid Docpro docpro allows PHP Local File Inclusion.This issue affects Docpro: from n/a through <= 2.0.1. EPSS 0.9%Vulnerability Rashid	CVE Database V5	2025-03-26
Medium	6.5	EPSS 0.6%	CVE-2024-43165WPSection · Path Traversal Medium6.5EPSS 0.6%2024-08-13CVE Database V5CVE-2024-43165 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8. EPSS 0.6%Vulnerability Rashid87 #cwe-22	CVE Database V5	2024-08-13

Showing 1–14 of 14 results