Количество 374 083
Количество 374 083
CVE-2026-65476
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
CVE-2026-65475
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30.
CVE-2026-65474
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
CVE-2026-65473
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
CVE-2026-65472
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
CVE-2026-65471
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
CVE-2026-65470
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
CVE-2026-65469
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
CVE-2026-65468
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
CVE-2026-65467
Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.
CVE-2026-65466
Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.
CVE-2026-65465
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.
CVE-2026-65464
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
CVE-2026-65463
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
CVE-2026-65462
Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.
CVE-2026-65461
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.
CVE-2026-65460
Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions.
CVE-2026-65458
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5.
CVE-2026-65457
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
CVE-2026-65456
Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-65476 Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. | CVSS3: 5.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30. | CVSS3: 6.5 | 0% Низкий | 16 дней назад |
| CVE-2026-65474 Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. | CVSS3: 5.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65473 Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. | CVSS3: 6.5 | 0% Низкий | 16 дней назад |
| CVE-2026-65472 Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions. | CVSS3: 5.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65471 Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions. | CVSS3: 9.6 | 0% Низкий | 16 дней назад |
| CVE-2026-65470 Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. | CVSS3: 6.5 | 0% Низкий | 16 дней назад |
| CVE-2026-65469 Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. | CVSS3: 5.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65468 Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. | CVSS3: 5.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65467 Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions. | CVSS3: 4.9 | 0% Низкий | 16 дней назад |
| CVE-2026-65466 Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions. | CVSS3: 4.9 | 0% Низкий | 16 дней назад |
| CVE-2026-65465 Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. | CVSS3: 6.5 | 0% Низкий | 16 дней назад |
| CVE-2026-65464 Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions. | CVSS3: 5.4 | 0% Низкий | 16 дней назад |
| CVE-2026-65463 Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions. | CVSS3: 5.4 | 0% Низкий | 16 дней назад |
| CVE-2026-65462 Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions. | CVSS3: 7.6 | 0% Низкий | 16 дней назад |
| CVE-2026-65461 Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions. | CVSS3: 9.1 | 0% Низкий | 16 дней назад |
| CVE-2026-65460 Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions. | CVSS3: 4.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65458 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5. | CVSS3: 4.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65457 Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. | CVSS3: 4.3 | 0% Низкий | 16 дней назад |
| CVE-2026-65456 Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions. | CVSS3: 4.3 | 0% Низкий | 16 дней назад |
Уязвимостей на страницу