The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery...
CVE-2026-8423
The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, a
#severity:medium
共收录 5624 条相关情报。
← 返回所有主题The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress...
CVE-2026-6394
The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server
The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to...
CVE-2026-6395
The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to...
CVE-2026-6072
The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through Us
The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross...
CVE-2026-6391
The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in
The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-6549
The Logo Manager For Enamad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' attribute
The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky...
CVE-2026-6397
The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `cvmh-sticky` shortcode `readmorete
The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-5293
The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js'
The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request...
CVE-2026-6400
The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions
The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored...
CVE-2026-6404
The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th
The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions...
CVE-2026-6401
The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.
The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions...
CVE-2026-6399
The General Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.
The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in...
CVE-2026-6452
The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i
Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in...
CVE-2026-43620
Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver
Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token...
CVE-2026-43618
Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit s
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's...
CVE-2026-43617
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as ...
CVE-2026-45585
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".
Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer...
CVE-2023-7345
Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability th
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU...
CVE-2025-15645
Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due t
Improper input validation in the System Management Mode (SMM) communications buffer could allow a...
CVE-2024-36343
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to