Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
CVE-2026-32570
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
2026-10-07 归档
今日共收录 1979 条安全情报，包含 1214 个 CVE，387 篇安全通告，以及 100 篇研究论文。
← 返回归档列表Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVE-2026-32569
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.
CVE-2026-25434
Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions.
Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.
CVE-2026-25433
Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This is...
CVE-2026-105879
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElem
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Pro...
CVE-2026-105809
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a ...
CVE-2026-105808
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the f
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
CVE-2026-105317
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.
CVE-2026-105071
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
CVE-2026-105070
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.
CVE-2026-105061
Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.
Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
CVE-2026-105059
Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
CVE-2026-105058
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
CVE-2026-105057
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
CVE-2026-104814
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
CVE-2026-104757
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
CVE-2026-104747
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
CVE-2026-104672
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
CVE-2026-104670
Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
CVE-2026-104406
Unauthenticated Broken Access Control in picu <= 3.10.1 versions.