| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-58118 | - | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-07 19:10:00 | 2026-10-29 19:17:23 |
| CVE-2026-60111 | - | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-11-07 19:10:00 | 2026-10-29 18:17:33 |
| CVE-2026-96565 | 6.4 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field (scalar bypass of wpmem_sanitize_array) in all versions up to, and including, 3.5.7 due to ins | 2026-11-07 18:17:30 | 2026-11-07 12:17:47 |
| CVE-2026-9601 | 6.4 | The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'update_block_style' endpoint in all versions up to, and including, 3.19.9 due to insufficient input sanitization and output escap | 2026-11-07 18:17:30 | 2026-11-07 05:19:03 |
| CVE-2026-93766 | 7.2 | The Happyforms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'happyforms_client_referer' parameter in all versions up to, and including, 1.38.9 due to insufficient input sanitization and output escaping. This makes it | 2026-11-07 18:17:29 | 2026-11-07 12:17:47 |
| CVE-2026-93755 | 7.2 | The Happyforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spoofable client IP headers in versions up to, and including, 1.38.9. This is due to the happyforms_get_client_ip() function reading raw HTTP_CLIENT_IP and HTTP_X_FO | 2026-11-07 18:17:29 | 2026-11-07 12:17:47 |
| CVE-2026-93429 | 7.2 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'guests[][][documents]' Parameter in all versions up to, and including, 1.8.17 due to insufficient input sanitization and output escaping. | 2026-11-07 18:17:29 | 2026-11-07 12:17:46 |
| CVE-2026-93902 | 6.4 | The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via Social Profile Fields in all versions up to, and including, 8.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated at | 2026-11-07 18:17:29 | 2026-11-07 05:19:03 |
| CVE-2026-76500 | 9.8 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software h | 2026-11-07 18:17:29 | 2026-10-07 17:17:01 |
| CVE-2026-76499 | 9.8 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software h | 2026-11-07 18:17:29 | 2026-10-07 17:17:01 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39927
Zapisa po stranici: