The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable...
CVE-2026-6448
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL
#severity:medium
共收录 5584 条相关情报。
← 返回所有主题The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-8900
The Simple SEO Slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in a
The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
CVE-2026-7047
The Frontend User Notes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is...
CVE-2026-9719
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Req
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting...
CVE-2026-8893
The Express Payment For Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribut
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More...
CVE-2026-10038
The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vul
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
CVE-2026-7523
The Alba Board plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. T
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers...
CVE-2026-6240
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficie
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2,...
CVE-2026-6241
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled
An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS...
CVE-2026-6242
An authenticated format string vulnerability exists in the ONVIF Subscribe service in Tapo C520WS v2 due to improper han
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers...
CVE-2026-6239
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device
Bugsink: DOS using large numbers of event tags
### Summary In affected versions, Bugsink stores every tag supplied with an incoming event. An event with an unusually
Bugsink: Project scoping missing in sourcemap and debug-file lookup
CVE-2026-47728
### Summary Bugsink before 2.2.0 resolved sourcemaps and debug files by debug ID without scoping that lookup to the pro
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface...
CVE-2026-25624
An administrative cross-site scripting (XSS) vulnerability exists in the web user interface dashboard layout of Arista E
Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables
CVE-2026-47745
## Impact The admin tables for `PaymentMethods`, `Currencies` and `Carriers` exposed inline toggles and per-record acti
Shopper: Missing authorization on Product admin Livewire sub-form components
CVE-2026-47742
## Impact Sub-form Livewire components used in the product editor (`Edit`, `Inventory`, `Seo`, `Shipping`, `Files`) had
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown...
CVE-2026-11344
A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file n
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN...
CVE-2026-7473
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This...
CVE-2026-11342
A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown functi
Improper Access Control in vantage6 node
### Impact Malicious algorithms can potentially access other algorithms input and output files. ### Patches Todo ### W