Количество 386 296
Количество 386 296
CVE-2026-57672
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions.
CVE-2026-57671
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.
CVE-2026-57670
Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions.
CVE-2026-5766
An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZE` limit, potentially loading large files into memory and causing service degradation. As a reminder, Django expects a limit to be configured at the web server level rather than solely relying on `FILE_UPLOAD_MAX_MEMORY_SIZE`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Kyle Agronick for reporting this issue.
CVE-2026-57669
Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.
CVE-2026-57668
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.2.2.
CVE-2026-57667
Sales Representative SQL Injection in Groundhogg <= 4.5 versions.
CVE-2026-57665
Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions.
CVE-2026-57664
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.
CVE-2026-57663
Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.
CVE-2026-57662
Contributor SQL Injection in Contest Gallery <= 30.0.0 versions.
CVE-2026-57661
Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
CVE-2026-57660
Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions.
CVE-2026-57659
Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions.
CVE-2026-57658
Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions.
CVE-2026-57657
Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions.
CVE-2026-57656
Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.
CVE-2026-57655
Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.
CVE-2026-57654
Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions.
CVE-2026-57653
Contributor SQL Injection in WP Job Portal <= 2.5.2 versions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-57672 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57671 Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57670 Unauthenticated Cross Site Scripting (XSS) in Google Maps CP <= 1.2.5 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-5766 An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPLOAD_MAX_MEMORY_SIZE` limit, potentially loading large files into memory and causing service degradation. As a reminder, Django expects a limit to be configured at the web server level rather than solely relying on `FILE_UPLOAD_MAX_MEMORY_SIZE`. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Kyle Agronick for reporting this issue. | CVSS3: 5.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-57669 Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Stored XSS.This issue affects NEX-Forms: from n/a through <= 9.2.2. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-57667 Sales Representative SQL Injection in Groundhogg <= 4.5 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57665 Unauthenticated Insecure Direct Object References (IDOR) in GravityView <= 3.0.0 versions. | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57664 Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions. | CVSS3: 4.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57663 Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57662 Contributor SQL Injection in Contest Gallery <= 30.0.0 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57661 Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions. | CVSS3: 5.4 | 0% Низкий | 2 месяца назад |
| CVE-2026-57660 Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.1 versions. | CVSS3: 5.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57659 Unauthenticated Cross Site Request Forgery (CSRF) in Paid Memberships Pro - Add Member From Admin <= 0.7.2 versions. | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-57658 Administrator Arbitrary File Upload in TemplateSpare <= 4.2.0 versions. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57657 Unauthenticated Cross Site Request Forgery (CSRF) in Gmail SMTP <= 1.2.3.19 versions. | CVSS3: 4.3 | 0% Низкий | 2 месяца назад |
| CVE-2026-57656 Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions. | CVSS3: 5.9 | 0% Низкий | 2 месяца назад |
| CVE-2026-57655 Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions. | CVSS3: 8.2 | 0% Низкий | 2 месяца назад |
| CVE-2026-57654 Affiliate Broken Access Control in Affiliates Manager <= 2.9.49 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57653 Contributor SQL Injection in WP Job Portal <= 2.5.2 versions. | CVSS3: 8.5 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу