Known Vulnerabilities for JSON-RPC API by Leantime
Listed below are 10 of the newest known vulnerabilities associated with "JSON-RPC API" by "Leantime".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121616 json | A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-121509 json | A security flaw has been discovered in Headless CMS Plugin up to 2.0.4 on WordPress. This affects the function get_required_p... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-121430 json | AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST /api/station/{station_id}/waveform... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-121427 json | AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacking th... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120640 json | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query... | Not Provided | 2026-11-04 | 2026-11-03 |
| CVE-2026-120558 json | The Advanced Shipment Tracking for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the `tracking_provider... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120552 json | The SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress plugin for WordPress is vulnerable to Stored Cross-S... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120544 json | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Directory Trav... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120524 json | The News Kit Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formData' parame... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-120442 json | ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge ad... | Not Provided | 2026-11-02 | 2026-11-02 |