Rezultati pretraživanja za 'Od datuma: 15.01.2025.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-120238 | 9.0 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can b | 2026-11-01 18:17:13 | 2026-11-01 18:17:13 |
| CVE-2026-120237 | 4.0 | A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterruptExpired of the file sdks/typescript/packages/client/src/interrupts/index.ts of the component Interrupt expiry. This manipulation causes reso | 2026-11-01 18:17:13 | 2026-11-01 18:17:13 |
| CVE-2026-120114 | 7.2 | The Debug Log Manager – Conveniently Monitor and Inspect Errors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message (and pageUrl)' parameter in all versions up to, and including, 2.5.2 due to insufficient input sanitiza | 2026-11-01 18:17:13 | 2026-10-31 10:16:38 |
| CVE-2026-120075 | 7.2 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.6.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje | 2026-11-01 18:17:13 | 2026-10-31 09:16:33 |
| CVE-2026-120019 | 5.4 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.10.7 due to insufficient input sanitization and output escaping. This makes it possible for unaut | 2026-11-01 18:17:13 | 2026-10-31 07:16:37 |
| CVE-2026-119480 | 6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1. | 2026-11-01 18:17:12 | 2026-11-01 16:18:13 |
| CVE-2026-119160 | 6.4 | The Smart Post – Post Grid, Post Carousel, Post Slider Gutenberg Blocks for Blog & News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 4.0.9 due to insufficient | 2026-11-01 18:17:12 | 2026-10-31 09:16:33 |
| CVE-2026-119162 | 7.2 | The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'user-submitted-content' parameter in all versions up to, and including, 20260916 due to in | 2026-11-01 18:17:12 | 2026-10-31 07:16:36 |
| CVE-2026-119089 | 7.2 | The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.12.1 due to insufficient in | 2026-11-01 18:17:12 | 2026-10-31 07:16:36 |
| CVE-2026-119065 | 7.2 | The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'szbd-picked' checkout parameter in versions up to, and including, 3.3.0 The szbd_checkout_field_update_order_meta() handler store | 2026-11-01 18:17:12 | 2026-10-31 07:16:36 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12248
Zapisa po stranici: