CVE Security

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with...

Web


                                    CVE-2026-105976

Lire l'article

low 2.2

16/10/2026

Vulnérabilité low détectée - CVE-2026-105977

The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing ...

Web


                                    CVE-2026-105977

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-105989

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one o...

Web


                                    CVE-2026-105989

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-105990

The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form s...

Web


                                    CVE-2026-105990

Lire l'article

high 8.1

16/10/2026

Vulnérabilité high détectée - CVE-2026-104899

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all ...

Web


                                    CVE-2026-104899

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104763

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file...

Web


                                    CVE-2026-104763

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104766

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all v...

Web


                                    CVE-2026-104766

Lire l'article

low 3.1

16/10/2026

Vulnérabilité low détectée - CVE-2026-104742

The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and in...

Applications Web


                                    CVE-2026-104742

Lire l'article

high 7.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-104752

The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowi...

Web


                                    CVE-2026-104752

Lire l'article

medium 4.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104753

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-pri...

Web


                                    CVE-2026-104753

Lire l'article

low 3.5

16/10/2026

Vulnérabilité low détectée - CVE-2026-104754

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list vi...

Applications Web


                                    CVE-2026-104754

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104762

The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Block Font Fami...

Web


                                    CVE-2026-104762

Lire l'article

1 2 3