The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in...
CVE-2026-17123
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and incl
#advisory
共收录 23530 条相关情报。
← 返回所有主题The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce...
CVE-2026-15384
The Manual Image Crop WordPress plugin before 1.15 does not perform any capability check or nonce verification on the au
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is...
CVE-2026-16775
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue...
CVE-2026-19932
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function Groovy
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-16758
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code...
CVE-2026-17581
The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'the
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for...
CVE-2026-15351
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to
The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow...
CVE-2026-13712
The Divi WordPress theme before 5.9.0 does not properly escape some of its Social Media Follow module settings before ou
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href'...
CVE-2026-16079
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme'...
CVE-2026-15726
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in
The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More...
CVE-2026-15056
The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vul
The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...
CVE-2026-18385
The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – Profile
The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is...
CVE-2026-15345
The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic...
CVE-2026-15602
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the
The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File...
CVE-2026-15066
The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Extracted Comments in a
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up...
CVE-2026-12905
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to...
CVE-2026-14524
The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path va
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for...
CVE-2026-13358
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Ins
The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution...
CVE-2026-15009
The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vu
The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up...
CVE-2026-14498
The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5