384111 matches found
CVE-2026-103912: Improper Neutralization of Input During Web Page Generation
The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the ' ' parameter in all versions up to, and including, 3.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2026-96648: Improper Neutralization of Input During Web Page Generation
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-103365: Exposure of Sensitive Information to an Unauthorized Actor
The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the classic booking form's Details step. The endpoint booklyrenderdetails is registered for both wpajax and wpajaxnopriv, t...
CVE-2026-78535: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Photolia = 1.0.3 versions...
CVE-2026-78533: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Qwery = 3.6.1 versions...
CVE-2026-78531: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Jacqueline = 2.22 versions...
CVE-2026-78529: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Alliance = 3.11 versions...
CVE-2026-66567: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Anesta = 1.5.3 versions...
CVE-2026-66565: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FC United = 1.1.1 versions...
CVE-2026-66563: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Windsor = 2.10 versions...
CVE-2026-62125: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Asia Garden = 1.3.1 versions...
CVE-2026-97396: Improper Neutralization of Input During Web Page Generation
The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...
CVE-2026-93944: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...
CVE-2026-93943: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0...
CVE-2026-93942: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0...
CVE-2026-93941: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...
CVE-2026-93938: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...
CVE-2026-93937: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...
CVE-2026-93936: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...
CVE-2026-93935: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...