CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
2 advisories matched
2026-10-30
YITH WooCommerce Product Add-Ons Unauthenticated Bypass Vulnerability (CVE-2026-107868)
[Affected Scope] YITH WooCommerce Product Add-Ons plugin versions 4.34.0 and below.
[Impact] Unauthenticated attackers can bypass authorization checks by manipulating user-controlled keys to modify data.
[Mitigation] Immediately update the plugin to version 4.35.0 or later.
2026-06-23
Langflow /api/v1/responses IDOR Vulnerability Leading to Unauthorized Flow Execution (CVE-2026-55255)
[Affected Scope] Langflow versions prior to 1.9.1
[Impact] An authenticated attacker can execute arbitrary AI workflows belonging to other users by exploiting an IDOR vulnerability, potentially exposing sensitive data.
[Mitigation] Immediately upgrade Langflow to version 1.9.1 or higher, and restrict network access until patched.