Количество 393 454
Количество 393 454
CVE-2026-57770
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5.7.8.
CVE-2026-5776
The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks
CVE-2026-57769
Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions.
CVE-2026-57768
Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3.
CVE-2026-57767
Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions.
CVE-2026-57766
Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.
CVE-2026-57765
Contributor SQL Injection in WP EasyCart <= 5.9.0 versions.
CVE-2026-57764
Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions.
CVE-2026-57763
Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions.
CVE-2026-57762
Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions.
CVE-2026-57761
Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions.
CVE-2026-57760
Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29.
CVE-2026-57759
Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions.
CVE-2026-57758
Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions.
CVE-2026-57757
Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions.
CVE-2026-57756
Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions.
CVE-2026-57755
Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions.
CVE-2026-57754
Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions.
CVE-2026-57753
Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions.
CVE-2026-57752
Contributor SQL Injection in iNET Webkit 1.2.4 versions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-57770 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5.7.8. | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| CVE-2026-5776 The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks | CVSS3: 6.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-57769 Unauthenticated Cross Site Scripting (XSS) in Grand Photography <= 5.7.8 versions. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-57768 Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a through <= 3.3.3. | CVSS3: 8.2 | 0% Низкий | 2 месяца назад |
| CVE-2026-57767 Unauthenticated Cross Site Scripting (XSS) in WP Google Maps Pro <= 10.1.02 versions. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-57766 Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-57765 Contributor SQL Injection in WP EasyCart <= 5.9.0 versions. | CVSS3: 8.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57764 Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57763 Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57762 Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. | CVSS3: 5.9 | 0% Низкий | 3 месяца назад |
| CVE-2026-57761 Unauthenticated Cross Site Request Forgery (CSRF) in SEOWP <= 3.12.2 versions. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-57760 Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sendcloud Shipping: from n/a through 1.0.29. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-57759 Unauthenticated Cross Site Request Forgery (CSRF) in ProfileGrid <= 5.9.9.7 versions. | CVSS3: 8.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-57758 Unauthenticated Cross Site Request Forgery (CSRF) in Permalink Manager for WooCommerce <= 1.0.8.2 versions. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-57757 Unauthenticated Cross Site Request Forgery (CSRF) in pCloud WP Backup <= 2.0.2 versions. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-57756 Contributor SQL Injection in nicen-localize-image <= 1.4.9 versions. | CVSS3: 8.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57755 Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57754 Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions. | CVSS3: 6.5 | 0% Низкий | 3 месяца назад |
| CVE-2026-57753 Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. | CVSS3: 5.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-57752 Contributor SQL Injection in iNET Webkit 1.2.4 versions. | CVSS3: 8.5 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу