The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all...
CVE-2026-9766
The Empik for Woocommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includin
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site...
CVE-2026-1256
The YS LeadGen plugin for WordPress is vulnerable to authorization bypass and Stored Cross-Site Scripting via multiple A
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the ...
CVE-2026-9855
The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site...
CVE-2026-87917
The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'data' Dynam
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the ...
CVE-2026-75959
The GoPay for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'log_table_filter' paramet
The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization...
CVE-2026-9858
The Partial Shipment for Woocommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and
The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to...
CVE-2026-9615
The Flex Import plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0. T
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a...
CVE-2026-15947
The Metasync plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o
The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to...
CVE-2026-15463
The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Reflected Cross-Site Scr
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request...
CVE-2026-1641
The Wow Elements Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross...
CVE-2026-2422
The WP Composer – The Easiest Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pb
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post...
CVE-2026-1984
The Ibtana – Ecommerce Product Addons plugin for WordPress is vulnerable to unauthorized post meta modification due to a
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...
CVE-2026-5400
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Media field filter values
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and...
CVE-2026-4792
The Bread plugin for WordPress is vulnerable to information exposure in versions up to and including 2.9.12. This is due
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic...
CVE-2026-1242
The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callb
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all...
CVE-2026-6295
The WP Optimizer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to and inc
The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to...
CVE-2026-2278
The VW Writer Blog theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by'...
CVE-2026-13191
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order_by' parameter in all versions up t
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI...
CVE-2026-15946
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress
The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker)...
CVE-2026-13770
The AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin for WordPress is vul