398 matches found
EUVD-2026-63313
Subscriber SQL Injection in WP w3all phpBB = 3.0.5 versions...
CLSA-2026-1786607229 TuxCare security update for org.springframework (5 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 5 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.10...
Security Bulletin:i18nextify JavaScript Library: URL-Injection Vulnerability Prior to 3.0.5
Summary i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 3.0.5 interpolate the lng and ns values directly into the configured loadPath / addPath URL template...
CVE-2026-25403
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
EUVD-2026-53938
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-25403 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CLSA-2026-1784509762 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 11 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.8...
CLSA-2026-1779842933 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.2...
CVE-2026-66475
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce - Checkout Manager = 3.0.5 versions...
EUVD-2026-49250
Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...
CVE-2026-65707 Likeshop 3.0.5 Authenticated SQL Injection via adjustAccount Endpoint
Likeshop through 3.0.5 contains an authenticated SQL injection vulnerability that allows admin-level users to extract arbitrary database contents by submitting unsanitized POST parameters to the adjustAccount endpoint. The adjustAccount method in UserLogic.php concatenates the money, integral,...
CVE-2026-65503
Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65505
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65505 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
EUVD-2026-48114
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65505
CVE-2026-65505 concerns WordPress sites using the Ultimate Store Kit Elementor Addons plugin, affected versions
EUVD-2026-48113
Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65503
The CVE concerns WordPress plugin Ultimate Store Kit Elementor Addons versions
