CVE IDSeverityCVSSDescriptionDate
CVE-2025-7963MEDIUM6.4The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode_e…2026-09-02
CVE-2026-14828HIGH8.8Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Mana…2026-09-02
CVE-2026-23583NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23584NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23585NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23586NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23587NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23588NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23589NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23590NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-23591NAN/ARejected reason: Withdrawn by requester.…2026-09-02
CVE-2026-75528HIGH7.2The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author U…2026-09-02
CVE-2026-53683MEDIUM4.3reset_password.html parses query string parameters and uses the 'url' parameter as a redirection target (windo…2026-09-02
CVE-2026-84175NAN/AIn Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP…2026-09-02
CVE-2026-18672HIGH7.5In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in Ra…2026-09-02
CVE-2026-19219HIGH8.1In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request pa…2026-09-02
CVE-2026-32773MEDIUM6.1There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job …2026-09-02
CVE-2026-82958NAN/AIn Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service b…2026-09-02
CVE-2026-66652MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. T…2026-09-02
CVE-2026-81283HIGH8.8Subscriber PHP Object Injection in WP User Frontend <= 4.3.10 versions.…2026-09-02
CVE-2026-81286CRITICAL9.3Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.…2026-09-02
CVE-2026-81288HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions.…2026-09-02
CVE-2026-81289HIGH7.1Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 …2026-09-02
CVE-2026-81294CRITICAL9.8Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.…2026-09-02
CVE-2026-81769HIGH8.8Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This is…2026-09-02
CVE-2026-81770HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Interactive Geo Maps <= 1.6.30 versions.…2026-09-02
CVE-2026-81771HIGH7.1Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions.…2026-09-02
CVE-2026-81772HIGH8.8Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.…2026-09-02
CVE-2026-81774HIGH7.5Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment <= 2.3.3 versions.…2026-09-02
CVE-2026-81775HIGH7.1Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.…2026-09-02
CVE-2026-82223MEDIUM6.5Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions.…2026-09-02
CVE-2026-83562MEDIUM6.5Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.…2026-09-02
CVE-2026-84217MEDIUM5.4Missing Authorization vulnerability in Mamunur Rashid Classified Listing allows Accessing Functionality Not Pr…2026-09-02
CVE-2026-84759HIGH7.1Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.…2026-09-02
CVE-2026-84760MEDIUM5.3Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions.…2026-09-02
CVE-2026-84764HIGH8.8Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.…2026-09-02
CVE-2026-84770HIGH8.8Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.…2026-09-02
CVE-2026-84771MEDIUM5.3Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.…2026-09-02
CVE-2026-84772MEDIUM5.5Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.…2026-09-02
CVE-2026-84775MEDIUM5.3Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.…2026-09-02
CVE-2026-84780MEDIUM5.3Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions.…2026-09-02
CVE-2026-84781MEDIUM6.5Contributor Cross Site Scripting (XSS) in Gallery PhotoBlocks <= 1.3.4 versions.…2026-09-02
CVE-2026-84792MEDIUM4.3Craft CMS versions before 5.10.11 contain a broken access control vulnerability in the element-indexes/save-el…2026-09-02
CVE-2026-84793MEDIUM4.8Craft CMS versions from 5.0.0-RC1 before 5.10.11 contain a stored cross-site scripting vulnerability in the si…2026-09-02
CVE-2026-84794HIGH7.1Craft CMS versions before 5.10.11 lack authorization checks in the assets/move-asset endpoint when force=1 is …2026-09-02
CVE-2026-84795CRITICAL9.8Craft CMS before 5.10.11 fails to validate the admin flag during user registration, allowing it to persist fro…2026-09-02
CVE-2026-84796HIGH8.8Craft CMS versions before 5.10.11 contain a site scope bypass vulnerability in GraphQL entry mutation resolver…2026-09-02
CVE-2026-84797MEDIUM6.3Craft CMS versions before 5.10.11 contain an authorization bypass vulnerability in ElementsController::actionD…2026-09-02
CVE-2026-84798HIGH7.1Craft CMS versions >= 5.0.0-RC1 and < 5.10.11 fail to perform an independent authorization check in ElementsCo…2026-09-02
CVE-2026-84799MEDIUM4.3Craft CMS before 5.11.0 fails to enforce user-group scope filters on native GraphQL user relations including a…2026-09-02
←3 / 7715→