The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not...
CVE-2026-14835
The SOGO Add Script to Individual Pages Header Footer WordPress plugin through 3.9 does not sanitise or escape the custo
#advisory
共收录 23717 条相关情报。
← 返回所有主题The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters...
CVE-2026-14307
The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the...
CVE-2026-19722
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files ext
The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form...
CVE-2026-78364
The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting th
The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape...
CVE-2026-76585
The Customer Reviews for WooCommerce WordPress plugin before 5.118.0 does not sanitise and escape the content of custome
coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting
CVE-2026-82483
A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This impacts an unknown functi
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to...
CVE-2026-15980
The MyHome Core plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.4.5.
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function...
CVE-2026-82480
A security flaw has been discovered in NASA cFS up to 7.0.1. The affected element is the function CFE_SB_GetUserDataLeng
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function...
CVE-2026-82478
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parse_req
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the...
CVE-2026-82479
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OS_read of the file modules/protocol/tc
coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting
CVE-2026-82482
A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is...
CVE-2026-82422
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of t
A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this...
CVE-2026-82424
A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknow
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown...
CVE-2026-82423
A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to...
CVE-2026-15369
The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versio
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects...
CVE-2026-82421
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processin
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection...
CVE-2026-82476
Memos through 0.30.0 omits the 100.64.0.0/10 carrier-grade NAT address range from SSRF protection in its link-metadata f
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass...
CVE-2026-75807
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and i
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow...
CVE-2026-82475
iFlytek astron-agent through 1.1.1 contains an authorization bypass vulnerability in the copyFlow endpoint that fails to
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without...
CVE-2026-82473
KubeEdge CloudCore through 1.23.1 accepts node task status reports on its HTTPS server without authentication verificati