Filtreler

2.215 açık

1. 5,3Orta CVE-2026-2839 Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints hwk-fr Advanced Custom Fields: ExtendedCWE-8621 gün önce 1 gün önce
2. 5,4Orta CVE-2026-116761 CMB2 <= 2.13.4 - Unauthenticated Stored Cross-Site Scripting via Grouped WYSIWYG Field via Front-End Form jtsternberg CMB2CWE-791 gün önce 1 gün önce
3. 4,4Orta CVE-2026-109988 Product Addons for Woocommerce <= 3.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'type' Field Parameter acowebs Product Addons for Woocommerce – Product Options with Custom FieldsCWE-791 gün önce 1 gün önce
4. 6,4Orta CVE-2026-110071 Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute kitae-park Mang BoardCWE-791 gün önce 1 gün önce
5. 6,4Orta CVE-2026-108366 easy.jobs <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon' Block Attribute wpdevteam easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring SolutionCWE-791 gün önce 1 gün önce
6. 4,3Orta CVE-2026-116610 Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook hornero Clean LoginCWE-8621 gün önce 1 gün önce
7. 4,3Orta CVE-2026-111213 Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerceCWE-8621 gün önce 1 gün önce
8. 6,1Orta CVE-2026-92098 Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter webheadllc Webheadcoder Multi-Step Forms for Contact Form 7CWE-791 gün önce 1 gün önce
9. 6,4Orta CVE-2026-116749 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute e4jvikwp VikRentCar Car Rental Management SystemCWE-791 gün önce 1 gün önce
10. 4,3Orta CVE-2026-109980 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter barrykooij Related Posts for WordPressCWE-8621 gün önce 1 gün önce
11. 6,4Orta CVE-2026-104729 Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributes themefusion Avada (Fusion) BuilderCWE-791 gün önce 1 gün önce
12. 6,4Orta CVE-2026-118164 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter ifso If-So Dynamic Content – Elementor & All Page Builders PersonalizationCWE-791 gün önce 1 gün önce
13. 5,4Orta CVE-2026-100175 Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink wayneallen-1 PostieCWE-791 gün önce 1 gün önce
14. 6,4Orta CVE-2026-77188 Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute xootix Waitlist Woocommerce ( Back in stock notifier )CWE-791 gün önce 1 gün önce
15. 6,5Orta CVE-2026-110020 Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclos… widgetpack Rich Showcase for Google ReviewsCWE-8621 gün önce 1 gün önce
16. 4,3Orta CVE-2026-109979 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter barrykooij Related Posts for WordPressCWE-8621 gün önce 1 gün önce
17. 6,4Orta CVE-2026-104740 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute ifso If-So Dynamic Content – Elementor & All Page Builders PersonalizationCWE-791 gün önce 1 gün önce
18. 4,3Orta CVE-2026-111372 AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action quantumcloud AI ChatBot for WooCommerce – WoowBotCWE-8621 gün önce 1 gün önce
19. 6,4Orta CVE-2026-109978 Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute cozythemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups, Lead Forms & InboxCWE-791 gün önce 1 gün önce
20. 5,3Orta CVE-2026-76058 PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action odefranca PayPal Brasil para WooCommerceCWE-8621 gün önce 1 gün önce
21. 4,4Orta CVE-2026-111068 DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute justinnealey DesignSetGoCWE-791 gün önce 1 gün önce
22. 6,4Orta CVE-2026-109972 s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access SubscriptionsCWE-791 gün önce 1 gün önce
23. 6,4Orta CVE-2026-109590 Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerceCWE-791 gün önce 1 gün önce
24. 6,4Orta CVE-2026-109385 UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL posimyththemes UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and BricksCWE-791 gün önce 1 gün önce
25. 6,4Orta CVE-2026-103996 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute ifso If-So Dynamic Content – Elementor & All Page Builders PersonalizationCWE-791 gün önce 1 gün önce