Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7...
CVE-2026-49055
Unauthenticated Cross Site Scripting (XSS) in Drag and Drop Multiple File Upload – Contact Form 7 <= 1.3.9.7 versions.
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Subscriber Privilege Escalation in Amelia <= 2.3 versions.
CVE-2026-48889
Subscriber Privilege Escalation in Amelia <= 2.3 versions.
Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.
CVE-2026-49083
Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.
Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.
CVE-2026-49068
Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.
Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.
CVE-2026-48835
Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
CVE-2026-48874
Subscriber SQL Injection in GamiPress <= 7.8.7 versions.
Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions.
CVE-2026-48883
Unauthenticated Broken Access Control in WPC Product Bundles for WooCommerce <= 8.5.3 versions.
Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions.
CVE-2026-48872
Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions.
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.
CVE-2026-48882
Subscriber SQL Injection in WP Time Slots Booking Form <= 1.2.50 versions.
Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.
CVE-2026-48885
Unauthenticated Cross Site Scripting (XSS) in HollerBox <= 2.3.10.1 versions.
Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.
CVE-2026-48838
Unauthenticated Cross Site Scripting (XSS) in Post SMTP <= 3.6.2 versions.
Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions.
CVE-2026-48873
Unauthenticated Broken Access Control in Montonio for WooCommerce <= 10.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.
CVE-2026-48876
Unauthenticated Cross Site Scripting (XSS) in Stop Spammers <= 2026.3 versions.
Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.
CVE-2026-48871
Unauthenticated Cross Site Scripting (XSS) in MW WP Form <= 5.1.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.
CVE-2026-48867
Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.
Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.
CVE-2026-48868
Unauthenticated Insecure Direct Object References (IDOR) in Simple Shopping Cart <= 5.2.9 versions.
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted...
CVE-2026-47825
Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies in certain configu
Unauthenticated Broken Access Control in AI Product Search for WooCommerce – Motive...
CVE-2026-42664
Unauthenticated Broken Access Control in AI Product Search for WooCommerce – Motive Commerce Search <= 1.38.2 vers
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.
CVE-2026-42666
Unauthenticated Broken Access Control in Salon booking system <= 10.30.25 versions.
Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.
CVE-2026-42687
Unauthenticated PHP Object Injection in EventPrime <= 4.3.2.1 versions.