Количество 386 296
Количество 386 296
CVE-2026-57768
Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3.
CVE-2026-57767
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.
CVE-2026-57766
Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.
CVE-2026-57765
Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.
CVE-2026-57764
Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions.
CVE-2026-57763
Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions.
CVE-2026-57762
Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.
CVE-2026-57761
Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions.
CVE-2026-57760
Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29.
CVE-2026-57759
Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.
CVE-2026-57758
Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions.
CVE-2026-57757
Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.
CVE-2026-57756
Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.
CVE-2026-57755
Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions.
CVE-2026-57754
Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.
CVE-2026-57753
Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.
CVE-2026-57752
Contributor SQL Injection in iNET Webkit 1.2.4 versions.
CVE-2026-57751
Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions.
CVE-2026-57750
Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions.
CVE-2026-5774
Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-57768 Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3. | CVSS3: 8.2 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-57767 Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-57766 Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions. | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-57765 Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57764 Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57763 Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57762 Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
| CVE-2026-57761 Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57760 Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29. | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57759 Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions. | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-57758 Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57757 Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57756 Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57755 Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57754 Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57753 Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57752 Contributor SQL Injection in iNET Webkit 1.2.4 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57751 Unauthenticated Cross Site Request Forgery (CSRF) in Heateor Social Login <= 1.1.39 versions. | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57750 Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-5774 Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token. | CVSS3: 6.4 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу