The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword...
CVE-2026-92967
The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions
#advisory
共收录 23334 条相关情报。
← 返回所有主题The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...
CVE-2026-89334
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to auth
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function...
CVE-2026-92807
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions u
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-12042
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all v
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up...
CVE-2026-84434
The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all...
CVE-2026-89274
The WP Recipe Maker plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and inclu
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to,...
CVE-2026-15660
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. Thi
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all...
CVE-2026-87909
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_m
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in...
CVE-2026-15760
The Divi Essential plugin for WordPress is vulnerable to sensitive information exposure in versions up to, and including
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13354
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Cont
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty'...
CVE-2026-77820
The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...
CVE-2026-93923
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing st
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without...
CVE-2026-93922
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing store
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon...
CVE-2026-93921
SiYuan versions through 3.8.4 fail to enforce publish access control in the getDynamicIcon endpoint, allowing read-only
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function...
CVE-2026-93740
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `...
CVE-2026-75885
A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` and `/api/devfile/samples/` end
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function...
CVE-2026-93739
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /bo
The application protects access through its calculator-style vault passcode, but the stored data...
CVE-2026-77875
The application protects access through its calculator-style vault passcode, but the stored data is not bound to that au
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper()...
CVE-2026-93894
In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate...
CVE-2026-88097
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.