Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
CVE-2026-54866
Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
#CVE
共收录 63078 条相关情报。
← 返回所有主题Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.
CVE-2026-54865
Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.
CVE-2026-54864
Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions.
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
CVE-2026-54860
Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
CVE-2026-54859
Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
CVE-2026-54858
Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
CVE-2026-54857
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
CVE-2026-54856
Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.
Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows Retrieve Embedded Sensitive Data.This issue a...
CVE-2026-48200
Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite document-library-
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
CVE-2026-42701
Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a throu...
CVE-2026-42694
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allow
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.
CVE-2026-42692
Unauthenticated Cross Site Scripting (XSS) in WP Crowdfunding <= 2.2.2 versions.
Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.
CVE-2026-42690
Subscriber Broken Access Control in LearnPress <= 4.4.10 versions.
Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.
CVE-2026-27394
Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions.
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-20942
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public workflow, executing it under the flow owner'...
CVE-2026-18894
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code
Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing...
CVE-2026-119145
Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handl
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates...
CVE-2026-119144
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code to trigger a host panic through out-of-bounds zero-lengt...
CVE-2026-119143
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows guest code
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Future returned by TypedFunc::call_async can panic the host....
CVE-2026-119142
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the Fut