tag
Nuclei
Critical
WooCommerce Dynamic Pricing & Discounts (WC Designer Pro) Unauthenticated File Upload RCE (CVE-2025-6440)
CVE-2025-6440·
WordPress WooCommerce Dynamic Pricing & Discounts plugin (wc-designer-pro)
unpatched
Critical
Twonky Server 8.5.2 Unauthenticated `/nmc/rpc/` Auth Bypass & Admin Credential Log Leak (CVE-2025-13315)
CVE-2025-13315·
Twonky Server (Lynx Technology), a DLNA/UPnP media server
unpatched
Critical
Monsta FTP Pre-Authentication Remote Code Execution via Arbitrary File Upload (CVE-2025-34299)
CVE-2025-34299·
Monsta FTP (web-based FTP manager)
patched
Critical
FreePBX Framework Module Authentication Bypass via Forged Authorization Header (CVE-2025-66039)
CVE-2025-66039·
FreePBX (Sangoma) framework module — web-based administration panel for Asterisk-based VoIP/PBX systems
patched
Critical
ProjeQtor Unauthenticated Login SQL Injection (CVE-2026-41462)
CVE-2026-41462·
ProjeQtor project management tool
patched
High
Perfmatters WordPress Plugin Arbitrary File Deletion (CVE-2026-4350)
CVE-2026-4350·
Perfmatters WordPress plugin
unpatched
Critical
Gotenberg 8.29.1 Unauthenticated ExifTool Metadata Key Injection RCE (CVE-2026-42589)
CVE-2026-42589·
Gotenberg (document/PDF conversion microservice)
patched