The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up...
CVE-2026-4327
The The Welcomizer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to and including 2.8.1
#severity:high
共收录 5373 条相关情报。
← 返回所有主题The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is...
CVE-2026-15664
The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has...
CVE-2026-86814
The UsersWP WordPress plugin before 1.5.10 does not verify that a social login provider has confirmed ownership of an e
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not...
CVE-2026-88926
The VikRentItems Flexible Rental Management System WordPress plugin before 1.2.4 does not sanitise and escape some of it
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its...
CVE-2026-92404
The MgoSync WordPress plugin before 2.1.7 does not have authorization controls on one of its REST API endpoints, allowi
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user...
CVE-2026-85680
The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names bef
The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several...
CVE-2026-76790
The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check...
CVE-2026-85574
The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the conf
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an...
CVE-2026-76554
The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to
The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST...
CVE-2026-88824
The Master Blocks WordPress plugin before 1.5.0 does not have authorisation on one of its REST routes, allowing unauthe
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function...
CVE-2026-92807
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions u
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all...
CVE-2026-87909
The WP Photo Album Plus plugin for WordPress is vulnerable to Remote Code Execution in all versions via the wppa_image_m
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-13354
The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Cont
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark...
CVE-2026-93923
SiYuan through 3.8.4 fails to escape heading style attributes when rendering outline and bookmark dock HTML, allowing st
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without...
CVE-2026-93922
SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing store
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function...
CVE-2026-93739
A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /bo
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate...
CVE-2026-88097
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function...
CVE-2026-93738
A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the file /boa
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for...
CVE-2026-93031
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to...
CVE-2026-84108
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization