27858 matches found
CVE-2024-58355
Cal.com (calcom/cal.diy) versions up to 4.7.15 are affected by a stored XSS in the booking flow. The vulnerability occurs in the single booking view where booking-question labels are rendered via React’s dangerouslySetInnerHTML without sanitization, allowing an attacker who can create an event ty...
EUVD-2026-48429
The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mosamlvalidatesignature function performing a loose boolean check on the raw tri-state integer returned by PHP's opensslverify, causing a...
NPM: React Router: Open redirect leading to XSS
NPM: React Router: Open redirect leading to XSS vulnerability discovered by ? in WordPress Npm react-router-dom versions = 6.30.2, = 6.30.4...
CVE-2026-65526
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65521
Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...
CVE-2026-65512
Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...
EUVD-2026-48140
Unauthenticated Cross Site Request Forgery CSRF in Kwayy HTML Sitemap = 4.0 versions...
CVE-2026-65535
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
EUVD-2026-48136
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
EUVD-2026-48134
Contributor Cross Site Scripting XSS in Smart SEO Tool = 4.1.2 versions...
EUVD-2026-48131
Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...
CVE-2026-65530
Subscriber Broken Access Control in TemplateSpare = 4.2.2 versions...
EUVD-2026-48127
Contributor SQL Injection in Visualizer = 4.0.6 versions...
CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
EUVD-2026-48118
Unauthenticated Cross Site Request Forgery CSRF in WP Activity Log = 5.6.4 versions...
CVE-2026-65511
CVE-2026-65511 affects the WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme (versions
EUVD-2026-48117
Unauthenticated Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...
EUVD-2026-48087
Unauthenticated Broken Access Control in Civi = 2.2.4 versions...