Known Vulnerabilities for Admin.Core by Zhontai
Listed below are 10 of the newest known vulnerabilities associated with "Admin.Core" by "Zhontai".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111355 json | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore de... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-107850 json | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access ... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-106513 json | MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroM... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-105126 json | LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to e... | Not Provided | 2026-10-04 | 2026-10-05 |
| CVE-2026-104081 json | KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.f... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-100724 json | http4k (Maven package org.http4k:http4k-core) before 6.49.0.0, 5.42.0.0 and 4.51.0.0 uses substring (Contains) matching on th... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-97721 json | A weakness has been identified in Sanluan PublicCMS up to 6.202506.e. This vulnerability affects the function CmsContentAdmin... | Not Provided | 2026-09-25 | 2026-09-29 |
| CVE-2026-97344 json | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar ... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-96840 json | The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name U... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-92619 json | The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 ... | Not Provided | 2026-09-18 | 2026-09-18 |