The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable...
CVE-2026-4661
The WP CTA – Sticky CTA Builder, Generate Leads, Promote Sales plugin for WordPress is vulnerable to time-based blind SQ
#severity:high
共收录 5441 条相关情报。
← 返回所有主题The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized...
CVE-2026-1359
The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due t
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress...
CVE-2026-15155
The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authent
The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to...
CVE-2025-6784
The Code Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.3.5
The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in...
CVE-2026-7655
The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and incl
The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is...
CVE-2026-14262
The Simple JWT Login – Allows you to use JWT on REST endpoints. plugin for WordPress is vulnerable to Authentication Byp
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a...
CVE-2026-2354
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validatio
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-13378
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contac
The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request...
CVE-2026-3576
The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local
The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form...
CVE-2026-15335
The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form) in all
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File...
CVE-2026-15338
The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to
The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for...
CVE-2026-13353
The WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel plugin for WordPress is vulnerable to Remo
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to...
CVE-2026-13114
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripti
The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up...
CVE-2026-13756
The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.3
Previously, there was no throttling on repeated authentication attempts to the charging station...
CVE-2026-42952
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could al
Multiple connections to the backend using the same charging station ID are allowed, which could...
CVE-2026-44383
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to de
OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy...
CVE-2026-14480
OpenPLC Runtime v3 contains an authenticated arbitrary file write vulnerability in the legacy web UI program‑upload wor
melange: Incomplete package integrity verification allows data section substitution
CVE-2026-54174
Previously, Apko verified the control section hash (`.PKGINFO` etc.) against the signed `APKINDEX`, but never verified t
RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side...
CVE-2026-57850
RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a l
The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field...
CVE-2026-11321
The DataInjection plugin for GLPI 2.15.6 (GLPI 11 builds) concatenates user-supplied CSV field values directly into SQL