CVE Security

The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the...

Web


                                    CVE-2026-97670

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-9696

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and includ...

Web


                                    CVE-2026-9696

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103482

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_t...

Web


                                    CVE-2026-103482

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103520

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cust...

Web


                                    CVE-2026-103520

Lire l'article

medium 4.7

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103912

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '<attacker-c...

Web


                                    CVE-2026-103912

Lire l'article

medium 4.9

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104023

The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including...

Web


                                    CVE-2026-104023

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104723

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, an...

Web


                                    CVE-2026-104723

Lire l'article

high 8.8

16/10/2026

Vulnérabilité high détectée - CVE-2026-104725

The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and in...

Web


                                    CVE-2026-104725

Lire l'article

low 3.1

16/10/2026

Vulnérabilité low détectée - CVE-2026-104741

The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and in...

Web


                                    CVE-2026-104741

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-6723

The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all ...

Web


                                    CVE-2026-6723

Lire l'article

medium 6.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-87869

The Filter Everything — WordPress & WooCommerce Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and ...

Web


                                    CVE-2026-87869

Lire l'article

high 7.5

16/10/2026

Vulnérabilité high détectée - CVE-2026-89301

The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation...

Applications Web


                                    CVE-2026-89301

Lire l'article

1 2 3 4