The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter...
CVE-2026-15951
The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and
#advisory
共收录 23634 条相关情报。
← 返回所有主题The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15649
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Sho
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15645
The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'na
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress...
CVE-2026-16091
The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form...
CVE-2026-11995
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is...
CVE-2026-15052
The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr
The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in...
CVE-2026-2916
The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, an
The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to...
CVE-2026-16087
The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injec
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file...
CVE-2026-15450
The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path trav
Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field
CVE-2026-17605
The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13362
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in...
CVE-2026-15414
The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and incl
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is...
CVE-2026-7623
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cros
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection...
CVE-2026-15403
The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection via the 'field' parame
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation...
CVE-2026-15006
The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This...
CVE-2026-9044
An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150...
CVE-2026-52232
A reflected cross-site scripting (XSS) vulnerability in the /logo.asp component of FS Inc S3150-8T2F Switch 2.2.0D Build
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node...
CVE-2026-68771
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthentic
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3...
CVE-2026-52371
A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticat
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary...
CVE-2026-34641
Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co