Количество 386 939
Количество 386 939
CVE-2026-57361
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.
CVE-2026-57360
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions.
CVE-2026-5735
Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2.
CVE-2026-57359
Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions.
CVE-2026-57358
Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions.
CVE-2026-57357
Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions.
CVE-2026-57356
Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions.
CVE-2026-57355
Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions.
CVE-2026-57354
Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions.
CVE-2026-57353
Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions.
CVE-2026-57352
Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions.
CVE-2026-57351
Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions.
CVE-2026-57350
Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.
CVE-2026-5734
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.
CVE-2026-57349
Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions.
CVE-2026-57348
Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions.
CVE-2026-57347
Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions.
CVE-2026-57346
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: from n/a through 1.12.3.
CVE-2026-57345
Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions.
CVE-2026-57344
Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-57361 Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57360 Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.5.4 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-5735 Memory safety bugs present in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2 and Thunderbird 149.0.2. | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-57359 Unauthenticated Cross Site Scripting (XSS) in ReviewX <= 2.3.10 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57358 Unauthenticated Cross Site Scripting (XSS) in Customize My Account for WooCommerce <= 4.3.9 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57357 Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO <= 2.6.6 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57356 Unauthenticated Cross Site Scripting (XSS) in MC Woocommerce Wishlist <= 1.9.19 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57355 Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57354 Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57353 Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57352 Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions. | CVSS3: 4.8 | 0% Низкий | 2 месяца назад |
| CVE-2026-57351 Unauthenticated Cross Site Scripting (XSS) in HandL UTM Grabber <= 2.9.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57350 Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-5734 Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1. | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-57349 Unauthenticated Cross Site Scripting (XSS) in WPeMatico RSS Feed Fetcher <= 2.8.17 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57348 Unauthenticated Server Side Request Forgery (SSRF) in Paid Member Subscriptions <= 3.0.4 versions. | CVSS3: 7.2 | 0% Низкий | 2 месяца назад |
| CVE-2026-57347 Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. | CVSS3: 6.5 | 0% Низкий | 2 месяца назад |
| CVE-2026-57346 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: from n/a through 1.12.3. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57345 Unauthenticated Cross Site Scripting (XSS) in Internal Links Manager <= 3.0.3 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-57344 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.4.2 versions. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу