CVE Security

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par...

Web


                                    CVE-2026-103424

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-103889

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 v...

Web


                                    CVE-2026-103889

Lire l'article

medium 4.7

16/10/2026

Vulnérabilité medium détectée - CVE-2026-101324

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Sit...

Web


                                    CVE-2026-101324

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-96743

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, ...

Web


                                    CVE-2026-96743

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-94589

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in al...

Web


                                    CVE-2026-94589

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-93883

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions u...

Web


                                    CVE-2026-93883

Lire l'article

unknown

16/10/2026

Vulnérabilité unknown détectée - CVE-2026-101947

ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export p...

Applications


                                    CVE-2026-101947

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103365

The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to...

Web


                                    CVE-2026-103365

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-104732

The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability ex...

Web


                                    CVE-2026-104732

Lire l'article

high 8.1

16/10/2026

Vulnérabilité high détectée - CVE-2026-104797

The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Chang...

Web


                                    CVE-2026-104797

Lire l'article

medium 6.8

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104898

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions...

Web


                                    CVE-2026-104898

Lire l'article

critical 9.1

16/10/2026

Vulnérabilité critical détectée - CVE-2026-107645

The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement...

Web


                                    CVE-2026-107645

Lire l'article

2 3 4 5 6