CVE Security

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '<attacker-c...

Web


                                    CVE-2026-103912

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104023

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including...

Web


                                    CVE-2026-104023

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104723

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, an...

Web


                                    CVE-2026-104723

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104725

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and in...

Web


                                    CVE-2026-104725

Lire l'article

low 3.1

16/10/2026

Vulnérabilité low détectée - CVE-2026-104741

The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and in...

Web


                                    CVE-2026-104741

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-6723

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all ...

Web


                                    CVE-2026-6723

Lire l'article

medium 6.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-87869

The Filter Everything — WordPress & WooCommerce Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and ...

Web


                                    CVE-2026-87869

Lire l'article

high 7.5

16/10/2026

Vulnérabilité high détectée - CVE-2026-89301

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation...

Applications Web


                                    CVE-2026-89301

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-96648

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Ac...

Web


                                    CVE-2026-96648

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-97630

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all version...

Web


                                    CVE-2026-97630

Lire l'article

medium 6.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103998

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ...

Mobile Web


                                    CVE-2026-103998

Lire l'article

high 7.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-104021

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[...

Web


                                    CVE-2026-104021

Lire l'article

1 2 3 4