The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored...
CVE-2026-18402
The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting v
#severity:medium
共收录 5490 条相关情报。
← 返回所有主题The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to,...
CVE-2026-15441
The WC Product Table Lite plugin for WordPress is vulnerable to CSS Injection in versions up to, and including, 5.6.0 vi
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15604
The Toocheke Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and includin
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-15963
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injectio
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in...
CVE-2026-10035
The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-16779
The Kubio AI Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in...
CVE-2026-15790
The Youtube Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is...
CVE-2026-16775
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cros
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-16758
The Snippet Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for...
CVE-2026-15351
The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href'...
CVE-2026-16079
The Fullscreen Galleria plugin for WordPress is vulnerable to generic SQL Injection via 'href' Attribute in Post Content
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme'...
CVE-2026-15726
The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in
The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More...
CVE-2026-15056
The StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More plugin for WordPress is vul
The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile &...
CVE-2026-18385
The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – Profile
The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is...
CVE-2026-15345
The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic...
CVE-2026-15602
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the
The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File...
CVE-2026-15066
The Loco Translate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PO File Extracted Comments in a
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up...
CVE-2026-12905
The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for...
CVE-2026-13358
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Ins
The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution...
CVE-2026-15009
The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vu