CVE Security

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injecti...

Web


                                    CVE-2026-104724

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104735

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-...

Web


                                    CVE-2026-104735

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104993

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting ...

Web


                                    CVE-2026-104993

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-5727

The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not p...

Web


                                    CVE-2026-5727

Lire l'article

medium 4.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103964

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_...

Web


                                    CVE-2026-103964

Lire l'article

critical 10

16/10/2026

🔥 EXPLOITÉ - BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

Vulnérabilité activement exploitée dans la nature - Action immédiate requise

Applications


                                    CVE-2026-102764

Lire l'article

critical 10

16/10/2026

🔥 EXPLOITÉ - Fortinet Multiple Products Path Traversal Vulnerability

Vulnérabilité activement exploitée dans la nature - Action immédiate requise

iOS Mobile Réseau


                                    CVE-2025-61624

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-102401

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all versions up to, and including...

Web


                                    CVE-2026-102401

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103424

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par...

Web


                                    CVE-2026-103424

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-103889

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 v...

Web


                                    CVE-2026-103889

Lire l'article

medium 4.7

16/10/2026

Vulnérabilité medium détectée - CVE-2026-101324

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Sit...

Web


                                    CVE-2026-101324

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-96743

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, ...

Web


                                    CVE-2026-96743

Lire l'article

1 2 3 4 5