Search Vulnerabilities

WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability

Authentication bypass issue exists in OpenBlocks series versions prior to FW5

Petlibro Smart Pet Feeder Platform through 1.7.31 Audio Information Disclosure via API endpoint

Nuvation Energy Multi-Stack Controller Authentication Bypass

Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling

DVP-12SE11T - Password Protection Bypass

WordPress Mobile builder plugin <= 1.4.2 - Broken Authentication vulnerability

WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability

TCC Bypass via Inherited Permissions in Bundled Interpreter

Authentication Bypass Using an Alternate Path or Channel in GitLab

Filament's multi-factor authentication (app) recovery codes can be used multiple times

Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

FindAll Membership <= 1.0.4 - Authentication Bypass via Social Login

ABB Ability Edgenius Authentication Bypass

Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115

@apollo/composition has Improper Enforcement of Access Control on Interface Types and Fields

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access in...

Apollo Router Core: Access Control Bypass on Polymorphic Types

WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability