CVE IDSeverityCVSSDescriptionDate
CVE-2026-84231NAN/AImproper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.l…2026-11-01
CVE-2026-87718NAN/AApache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose rende…2026-11-01
CVE-2026-95863NAN/AImproper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScr…2026-11-01
CVE-2026-117656NAN/AAcceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in …2026-10-31
CVE-2026-77152NAN/AImproper Authorization vulnerability in Drupal Field Collection for Drupal 7 allows a user with the "edit fiel…2026-10-31
CVE-2026-110176NAN/AThe File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition heade…2026-10-31
CVE-2026-116755HIGH7.4Improper Neutralization of Special Elements used in a Command ('Command Injection') in the Orchestrator compon…2026-10-31
CVE-2026-100155MEDIUM6.5The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for …2026-10-31
CVE-2026-101326MEDIUM5.4The The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for …2026-10-31
CVE-2026-109234HIGH7.2The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (bbP…2026-10-31
CVE-2026-109997HIGH7.2The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for Word…2026-10-31
CVE-2026-110042NAN/AThe Payment Forms for Paystack WordPress plugin before 4.0.6 does not properly restrict access to a page that …2026-10-31
CVE-2026-110808NAN/AThe Essential Addons for Elementor WordPress plugin before 6.8.8 does not correctly restrict who may set the …2026-10-31
CVE-2026-116520HIGH7.2The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c…2026-10-31
CVE-2026-116563MEDIUM5.4The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored…2026-10-31
CVE-2026-118043NAN/AThe Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before mo…2026-10-31
CVE-2026-118184NAN/AThe Premium Packages WordPress plugin before 7.2.2 does not prevent unauthenticated visitors from overwriting…2026-10-31
CVE-2026-118185NAN/AThe Security Optimizer WordPress plugin before 1.6.9 does not limit the number of two-factor authentication c…2026-10-31
CVE-2026-118437NAN/AThe BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploade…2026-10-31
CVE-2026-118438NAN/AThe Firelight Lightbox WordPress plugin before 2.3.24 does not properly escape image attribute values before p…2026-10-31
CVE-2026-118629NAN/AThe All-in-One Video Gallery WordPress plugin before 5.0.0 does not check a video's publication status before…2026-10-31
CVE-2026-118638NAN/AThe Mapster WP Maps WordPress plugin before 2.0.6 does not perform any authorization check on a REST API route…2026-10-31
CVE-2026-119977HIGH8.1WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictabl…2026-10-31
CVE-2026-82214NAN/AThe Quick Event Manager WordPress plugin before 9.19 does not verify the status or type of the requested post …2026-10-31
CVE-2026-92294MEDIUM6.5The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to limi…2026-10-31
CVE-2026-94361NAN/AThe Payable Payment Gateway for WooCommerce WordPress plugin before 1.3.1 does not verify the authenticity of …2026-10-31
CVE-2026-107653HIGH7.2The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations,…2026-10-31
CVE-2026-107750HIGH7.2The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scrip…2026-10-31
CVE-2026-107765MEDIUM6.4The Discussion Board – WordPress Forum Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin…2026-10-31
CVE-2026-109217MEDIUM5.3The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Sensitive Information E…2026-10-31
CVE-2026-109220CRITICAL9.8The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Obj…2026-10-31
CVE-2026-109386MEDIUM4.3The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to authorizat…2026-10-31
CVE-2026-110251MEDIUM5.4The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deleti…2026-10-31
CVE-2026-111109MEDIUM6.1The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title m…2026-10-31
CVE-2026-111254HIGH7.2The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' paramet…2026-10-31
CVE-2026-115840HIGH7.2The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting …2026-10-31
CVE-2026-116522HIGH7.2The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'co…2026-10-31
CVE-2026-116546MEDIUM6.4The WP Job Portal – AI-Powered Recruitment System for Company or Job Board website plugin for WordPress is vul…2026-10-31
CVE-2026-116548HIGH7.2The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting …2026-10-31
CVE-2026-116557CRITICAL9.1The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of da…2026-10-31
CVE-2026-118070HIGH7.2The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gid' paramet…2026-10-31
CVE-2026-119065HIGH7.2The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scriptin…2026-10-31
CVE-2026-119089HIGH7.2The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin plugin for WordPress …2026-10-31
CVE-2026-119162HIGH7.2The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable …2026-10-31
CVE-2026-119163HIGH7.5The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPres…2026-10-31
CVE-2026-119166MEDIUM5.3The Welcart e-Commerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions …2026-10-31
CVE-2026-119980MEDIUM6.5The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress i…2026-10-31
CVE-2026-11396MEDIUM5.3The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Missing Authorization / Inform…2026-10-31
CVE-2026-120019MEDIUM5.4The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' paramet…2026-10-31
CVE-2026-120040HIGH7.5The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Information Exposure in all version…2026-10-31
←166 / 8517→