CVE Security

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all ...

Web


                                    CVE-2026-104899

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104763

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file...

Web


                                    CVE-2026-104763

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104766

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all v...

Web


                                    CVE-2026-104766

Lire l'article

low 3.1

16/10/2026

Vulnérabilité low détectée - CVE-2026-104742

The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and in...

Applications Web


                                    CVE-2026-104742

Lire l'article

high 7.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-104752

The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowi...

Web


                                    CVE-2026-104752

Lire l'article

medium 4.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104753

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-pri...

Web


                                    CVE-2026-104753

Lire l'article

low 3.5

16/10/2026

Vulnérabilité low détectée - CVE-2026-104754

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list vi...

Applications Web


                                    CVE-2026-104754

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104762

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Block Font Fami...

Web


                                    CVE-2026-104762

Lire l'article

critical 9.1

16/10/2026

Vulnérabilité critical détectée - CVE-2026-97670

The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the...

Web


                                    CVE-2026-97670

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-9696

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and includ...

Web


                                    CVE-2026-9696

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103482

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_t...

Web


                                    CVE-2026-103482

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103520

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cust...

Web


                                    CVE-2026-103520

Lire l'article

1 2 3