The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via...
CVE-2026-11608
The WP Customer Reviews plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpcr3_fname' param
#severity:medium
共收录 5477 条相关情报。
← 返回所有主题The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site...
CVE-2026-12402
The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fb-config' S
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting...
CVE-2026-92435
The Mailchimp for WooCommerce WordPress plugin before 6.1.1 does not verify that the requesting user holds the required
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does...
CVE-2026-92421
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.3 does not verify that the hos
The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not...
CVE-2026-91847
The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester ow
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7...
CVE-2026-92430
The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit WordPress plugin before 5.4.7 does not verify the aut
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter...
CVE-2026-13200
The Create plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to,
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does...
CVE-2026-92425
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-leve
The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-15098
The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortc
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is...
CVE-2026-11899
The PDF Builder for WooCommerce. Create invoices,packing slips and more plugin for WordPress is vulnerable to authorizat
The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not...
CVE-2026-19860
The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PH
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or...
CVE-2026-84750
The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uplo
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check...
CVE-2026-16557
The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-build
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-88944
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to authorization bypass in all v
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...
CVE-2026-89093
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Info
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-89081
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scriptin
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to...
CVE-2026-89333
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Refere
The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword...
CVE-2026-92967
The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for...
CVE-2026-89334
The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to auth
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via...
CVE-2026-12042
The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all v