The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored...
CVE-2026-5063
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
#severity:high
共收录 5513 条相关情报。
← 返回所有主题A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects...
CVE-2026-7674
A flaw has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. This issue affects the function start_sin
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted...
CVE-2026-7675
A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function start_l
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible...
CVE-2026-2554
The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids...
CVE-2026-4062
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_i
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the ...
CVE-2026-4061
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all v
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort'...
CVE-2026-4060
The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions u
The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and...
CVE-2026-4100
The Paid Memberships Pro plugin for WordPress is vulnerable to unauthorized modification and disruption of Stripe webhoo
The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read...
CVE-2026-6320
The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and
School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing...
CVE-2026-7491
School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote att
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote...
CVE-2026-7489
CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged...
CVE-2026-7490
CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to up
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the...
CVE-2026-7607
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware
The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site...
CVE-2026-5324
The Brizy – Page Builder plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versio
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup...
CVE-2026-7649
The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in...
CVE-2026-6229
The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and incl
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets...
CVE-2026-2052
The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vuln
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing...
CVE-2026-6963
The WP Mail Gateway plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the w
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site...
CVE-2026-5110
The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to an
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...
CVE-2026-5111
The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10