Veille CVE

Recherche « Unknown TikTok »

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown TikTok » ✕
  1. CVE-2026-112106 3.7 Faible

    TufayelLUS TikTok-Video-Downloader-PHP

    A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown functionality of the file index.php of the component TLS Handler. Such manipulation leads to improper certificate validation. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitation is known to be difficult. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The name of the patch is 64c0155abb88e714198241d41b918cefc0d5a42a. It is advisable to implement a patch to correct this issue.

  2. CVE-2026-92965 3.7 Faible

    Unknown TikTok

    The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code loosely, so URLs that merely resemble the expected one trigger it too, and the callback runs on every request to the site rather than only on the administrator's sign-in.