CVE Security

low 3.1

16/10/2026

Vulnérabilité low détectée - CVE-2026-104742

The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and in...

Applications Web

CVE-2026-104742

Lire l'article

high 7.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-104752

The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowi...

Web

CVE-2026-104752

Lire l'article

medium 4.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104753

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-pri...

Web

CVE-2026-104753

Lire l'article

low 3.5

16/10/2026

Vulnérabilité low détectée - CVE-2026-104754

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list vi...

Applications Web

CVE-2026-104754

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104762

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Block Font Fami...

Web

CVE-2026-104762

Lire l'article

critical 9.1

16/10/2026

Vulnérabilité critical détectée - CVE-2026-97670

The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the...

Web

CVE-2026-97670

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-9696

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and includ...

Web

CVE-2026-9696

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103482

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_t...

Web

CVE-2026-103482

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103520

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cust...

Web

CVE-2026-103520

Lire l'article

medium 4.7

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103912

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '<attacker-c...

Web

CVE-2026-103912

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104023

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including...

Web

CVE-2026-104023

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104723

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, an...

Web

CVE-2026-104723

Lire l'article