The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-87091
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Par
#advisory
共收录 23210 条相关情报。
← 返回所有主题The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission...
CVE-2026-86832
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthent
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file...
CVE-2026-80517
The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uplo
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based...
CVE-2026-97341
The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ...
CVE-2026-96650
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo' Cust
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-96564
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title...
CVE-2026-93430
The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args
The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude...
CVE-2026-103913
The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to...
CVE-2026-97644
The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation v
The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO,...
CVE-2026-100152
The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugi
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-100148
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is...
CVE-2026-100149
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross...
CVE-2026-103888
The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'w
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when...
CVE-2026-103293
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a
The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once...
CVE-2026-103514
The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allo
The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape...
CVE-2026-101159
The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its
The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-101928
The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author'
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from...
CVE-2026-101161
The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-101357
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'se
The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview...
CVE-2026-101162
The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputt