#cwe-79

共收录 5770 条相关情报。

漏洞预警2026-08-01 发布INFO

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Block Attribute in all versions...

CVE-2026-18435

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53. This is ...

CVE-2026-18344

The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' par

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Identity Block Inner Image Content in all ve...

CVE-2026-18062

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site S

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'param' in al...

CVE-2026-17571

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in all versions up to, and including, 3.3.66 due to insuffi...

CVE-2026-16685

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due ...

CVE-2026-16684

The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gamipr...

CVE-2026-16091

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'heading_si...

CVE-2026-16090

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layout...

CVE-2026-15950

The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bg_color' parameter in all versions ...

CVE-2026-15662

The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Sit

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3...

CVE-2026-15649

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Sho

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and includi...

CVE-2026-15645

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'na

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and inclu...

CVE-2026-15644

The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'st

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions ...

CVE-2026-15052

The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cr

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布INFO

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due...

CVE-2026-13458

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML A

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-08-01 发布INFO

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site...

CVE-2026-13362

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

安全公告2026-08-01 发布INFO

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is...

CVE-2026-7623

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cros

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-79 #severity:medium

漏洞预警2026-08-01 发布MEDIUM

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in al...

CVE-2026-7623

CVE-2026-7623 是 WordPress 的 SureForms 插件（用于构建联系表单、支付表单及其他自定义表单）中存在的一个存储型跨站脚本（Stored XSS）漏洞。该漏洞影响所有版本直至并包括 2.8.1。漏洞源于插件对

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

漏洞预警2026-08-01 发布MEDIUM

The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all versions up to, and including, 2.2....

CVE-2026-13362

CVE-2026-13362 是 WordPress 的 SendPulse Email Marketing Newsletter 插件（版本至 2.2.5 及以下）中存在的一个存储型跨站脚本（Stored XSS）漏洞。该漏洞位于 _sp

历史摘要 · 未重新核验 · NVD

#cve #cwe-79

安全公告2026-07-31 发布INFO

@apostrophecms/seo Vulnerable to Stored XSS via Unsanitized Google Analytics / GTM ID Injected into Script Tag

CVE-2026-53608

### Summary The `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingId`) and Go

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-79 #severity:high