CVE Security

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Ac...

Web


                                    CVE-2026-96648

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-97630

The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all version...

Web


                                    CVE-2026-97630

Lire l'article

medium 6.1

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103998

The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ...

Mobile Web


                                    CVE-2026-103998

Lire l'article

high 7.2

16/10/2026

Vulnérabilité high détectée - CVE-2026-104021

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[...

Web


                                    CVE-2026-104021

Lire l'article

medium 5.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104724

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injecti...

Web


                                    CVE-2026-104724

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104735

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-...

Web


                                    CVE-2026-104735

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-104993

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting ...

Web


                                    CVE-2026-104993

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-5727

The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not p...

Web


                                    CVE-2026-5727

Lire l'article

medium 4.3

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103964

The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_...

Web


                                    CVE-2026-103964

Lire l'article

medium 6.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-102401

The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all versions up to, and including...

Web


                                    CVE-2026-102401

Lire l'article

medium 5.4

16/10/2026

Vulnérabilité medium détectée - CVE-2026-103424

The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' par...

Web


                                    CVE-2026-103424

Lire l'article

critical 9.8

16/10/2026

Vulnérabilité critical détectée - CVE-2026-103889

The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 v...

Web


                                    CVE-2026-103889

Lire l'article

1 2 3 4 5