The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to...
CVE-2026-13250
The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-7620
The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization...
CVE-2026-6804
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress...
CVE-2026-13262
The Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin plugin for WordPress is vulnerable to generi
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass...
CVE-2026-10628
The Points and Rewards for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,
The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in...
CVE-2026-7544
The Mux Video Uploader plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is...
CVE-2026-12141
The Premium Addons for Elementor – Powerful Elementor Templates & Widgets plugin for WordPress is vulnerable to Stored C
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to...
CVE-2026-15073
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-8678
The MyParcel plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.25.1. Th
The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-5743
The SimpLy Gallery Block & Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via block attribut
The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-3367
The Lockme OAuth2 calendars integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'App I
The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2025-13968
The Starboard Suite Reservation Calendars plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcod
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to...
CVE-2026-15072
The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to generic SQL Injection via
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to...
CVE-2026-12426
The Members – Membership & User Role Editor Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure
The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all...
CVE-2026-11426
The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and inclu
Improper encoding of non-finite floating-point values during MapMessage JSON serialization in...
CVE-2026-49844
Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...
CVE-2026-13039
The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to a
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-15295
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adm
HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows...
CVE-2025-30008
HestiaCP before 1.9.5 contains a stored cross-site scripting vulnerability that allows authenticated low-privilege users
GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP...
CVE-2026-15146
GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malici