Количество 384 604
Количество 384 604
CVE-2026-59555
Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions.
CVE-2026-59554
Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions.
CVE-2026-59553
Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
CVE-2026-59552
Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions.
CVE-2026-59551
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.
CVE-2026-59549
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions.
CVE-2026-59548
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions.
CVE-2026-59547
Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions.
CVE-2026-59546
Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions.
CVE-2026-59545
Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions.
CVE-2026-59544
Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions.
CVE-2026-59543
Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions.
CVE-2026-59542
Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions.
CVE-2026-59541
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
CVE-2026-59540
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions.
CVE-2026-5953
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026.
CVE-2026-59539
Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions.
CVE-2026-59538
Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions.
CVE-2026-59537
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59555 Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions. | CVSS3: 10 | 1% Низкий | около 1 месяца назад |
| CVE-2026-59554 Unauthenticated Broken Authentication in Ziina <= 1.2.21 versions. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59553 Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions. | CVSS3: 7.1 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59552 Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions. | CVSS3: 7.2 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59551 Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | CVSS3: 8.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59550 Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | CVSS3: 9.3 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59549 Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress <= 4.7.10 versions. | CVSS3: 9.3 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59548 Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking <= 1.0.0 versions. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59547 Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59546 Subscriber Broken Authentication in Hide My WP Ghost <= 7.0.06 versions. | CVSS3: 7.4 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59545 Unauthenticated Broken Authentication in miniOrange Discord Integration <= 2.2.4 versions. | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59544 Unauthenticated PHP Object Injection in Thrive Quiz Builder <= 10.9.3.0 versions. | CVSS3: 9.8 | 1% Низкий | около 1 месяца назад |
| CVE-2026-59543 Subscriber Remote Code Execution (RCE) in Advanced Views <= 3.8.11 versions. | CVSS3: 9.9 | 1% Низкий | около 1 месяца назад |
| CVE-2026-59542 Subscriber Arbitrary File Deletion in Kali Forms <= 2.4.18 versions. | CVSS3: 7.7 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59541 Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59540 Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.6 versions. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад |
| CVE-2026-5953 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026. | CVSS3: 6.1 | 0% Низкий | 4 дня назад |
| CVE-2026-59539 Subscriber Insecure Direct Object References (IDOR) in Paid Member Subscriptions <= 3.0.7 versions. | CVSS3: 7.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59538 Unauthenticated SQL Injection in GamiPress <= 7.9.7 versions. | CVSS3: 9.3 | 0% Низкий | около 1 месяца назад |
| CVE-2026-59537 Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 versions. | CVSS3: 7.6 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу