The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ...
CVE-2026-12938
The Newsletters Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' attribute of the
#severity:medium
共收录 5514 条相关情报。
← 返回所有主题The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-15735
The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cf7anyapi_form_field'
goshs has ACL Bypass & Path Traversal
CVE-2026-66064
## Summary `sendFile` derives the served filename from the raw request path while opening the file from the cleaned pat
Pagy I18n locale option is not validated before being used in a file path
CVE-2026-54659
### Summary `Pagy::I18n.locale=` did not validate its argument before using it as a path component to load the matching
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
### Impact `skilo add` installs a skill by recursively copying the skill directory into the target skills directory. Th
goshs has a Path Traversal issue
CVE-2026-66063
## Summary The multipart upload filename fix splits on the path separator but never rejects dot-dot, allowing a write o
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive...
CVE-2026-16581
In igloohome Smart Lock Mobile App versions 3.2.3 and prior, an Inclusion of Sensitive Information in Source Code vulner
SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows...
CVE-2026-57511
SuperPlane before 0.30.0 contains an SMTP header injection vulnerability that allows unauthenticated attackers to inject
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to...
CVE-2026-14515
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scriptin
IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM...
CVE-2026-7362
IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0...
CVE-2026-3157
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0...
CVE-2026-1918
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0...
CVE-2026-3158
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM
Tanium addressed a SQL injection vulnerability in Patch.
CVE-2026-11391
Tanium addressed a SQL injection vulnerability in Patch.
pglogical's apply worker does not sufficiently validate the length of certain fields in incoming...
CVE-2026-50735
pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol me
IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates...
CVE-2026-16107
IBM TS4500 CLI tool Versions: 0.1.31 through 1.12.0.0 does not validate or improperly validates TLS certificate validat
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow...
CVE-2026-4932
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physica
The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in...
CVE-2026-5114
The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and
The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side...
CVE-2026-4912
The Media Cleaner: Clean your WordPress! plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path'...
CVE-2026-15304
The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path' parameter in versions