The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request...
CVE-2026-19711
The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's
#advisory
共收录 23530 条相关情报。
← 返回所有主题The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before...
CVE-2026-19712
The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify...
CVE-2026-19728
The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored...
CVE-2026-18402
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting v
A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an...
CVE-2026-19934
A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the f
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have...
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some o
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a...
CVE-2026-19725
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauth
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one...
CVE-2026-19613
The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeate
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter...
CVE-2026-18653
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL sta
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in...
CVE-2026-18432
The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and i
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all...
CVE-2026-16098
The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includi
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to,...
CVE-2026-15441
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 vi
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2...
CVE-2026-19933
A weakness has been identified in DefaultFuction Customer-Relationship-Management-In-C-Project 2.0. Impacted is the func
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15604
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includin
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-15963
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injectio
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in...
CVE-2026-10035
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its...
CVE-2026-17533
The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionalit
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due...
CVE-2026-16099
The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file pat
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-16779
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15790
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,