#cwe-79

共收录 5376 条相关情报。

← 返回所有主题
漏洞预警2026-10-03 发布INFO

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_matomo_id' parameter in all versi...

CVE-2026-101357

The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'se

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as...

CVE-2026-101162

The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputt

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticate...

CVE-2026-101159

The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[].text' parameter in all versions up to, and including, 7...

CVE-2026-100148

The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3.2 due to ...

CVE-2025-12828

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out w

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 ...

CVE-2026-92977

The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and including, 8.7.7 due to in...

CVE-2026-92826

The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi...

CVE-2026-92727

The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Reflected Cross-S...

CVE-2026-92551

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' paramet...

CVE-2026-92538

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross...

CVE-2026-92243

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress...

CVE-2026-100180

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is...

CVE-2026-94378

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-03 发布INFO

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-03 发布INFO

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Script...

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versi...

CVE-2026-94378

The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored C

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.1...

CVE-2026-92243

The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-03 发布INFO

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all...

CVE-2026-100180

The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vul

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

Ultimate Member <= 2.13.1 - Unauthenticated Stored Cross-Site Scripting via 'form_id' Parameter

CVE-2026-96270

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-03 发布INFO

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and...

CVE-2026-104477

Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fa

历史摘要 · 未重新核验 · GitHub Advisory