Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-101159 | 7.5 | The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticated visitors, allowing them to perform Stored Cross-Site Scripting attacks | 2026-10-03 16:16:31 | 2026-10-03 06:16:38 |
| CVE-2026-100180 | 5.4 | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 3.2.19 due to insufficient input sanitiza | 2026-10-03 16:16:31 | 2026-10-03 03:16:36 |
| CVE-2026-101104 | 7.7 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, suc | 2026-10-03 16:16:31 | 2026-10-02 16:16:42 |
| CVE-2026-100184 | 4.7 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x (attacker-chosen name matching the form's url.<name> predefine | 2026-10-03 16:16:31 | 2026-10-01 09:17:07 |
| CVE-2026-100157 | 6.5 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an action that does not properly validate a value before | 2026-10-03 16:16:30 | 2026-10-03 07:16:46 |
| CVE-2026-100152 | 6.5 | The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.2 This is due to the soft | 2026-10-03 16:16:30 | 2026-10-03 06:16:37 |
| CVE-2026-100149 | 5.3 | The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.7.3 via the 'x-yamidoo-signature (attacker-obtained via inline_js id | 2026-10-03 16:16:30 | 2026-10-03 06:16:37 |
| CVE-2026-100148 | 6.4 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[].text' parameter in all versions up to, and including, 7.1.3 due to insufficient input sanitization and output escaping. This mak | 2026-10-03 16:16:30 | 2026-10-03 06:16:36 |
| CVE-2025-12828 | 6.4 | The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attr | 2026-10-03 16:16:30 | 2026-10-03 06:16:33 |
| CVE-2026-100107 | 7.2 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping. This makes it possible for | 2026-10-03 16:16:30 | 2026-10-02 08:16:58 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12764
Zapisa po stranici: