The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2025-12828
The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out w
#advisory
共收录 23210 条相关情报。
← 返回所有主题The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review...
CVE-2026-101160
The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content...
CVE-2026-101923
The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, an
WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons <= 4.7.3 - Unauthenticated Sensitive Information Disclosure via HMAC Signature Collision (Missing Domain Sep...
CVE-2026-100149
The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is...
CVE-2026-94539
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-bas
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...
CVE-2026-93428
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross...
CVE-2026-92243
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress...
CVE-2026-100180
The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is...
CVE-2026-94378
The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored C
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...
CVE-2026-96270
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is...
CVE-2026-95865
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injectio
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head...
CVE-2026-105090
Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enfor
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes...
CVE-2026-105080
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-conve
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
CVE-2026-79113
OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow.
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in...
CVE-2026-105083
ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips
Ultimate Member <= 2.13.1 - Missing Authorization to Unauthenticated Sensitive Profile Field Disclosure via Member Directory Field Privacy Bypass
CVE-2026-93428
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter
CVE-2026-96270
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference...
CVE-2026-105029
UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket
Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and...
CVE-2026-104477
Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fa
Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows...
CVE-2026-105030
Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retri