22289 matches found
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin Elementor Pro versions = 4.2.1...
CVE-2026-74804
creationtimestamp| type| source ---|---|--- 2026-08-19 14:04:01+00:00| seen| https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2kahc2s 2026-08-19 14:04:02+00:00| seen| https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2lbns2s 2026-08-19 16:08:24+00:00| seen|...
CVE-2026-73183
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73182
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
EUVD-2026-62378
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183
Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...
EUVD-2026-62377
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
CVE-2026-73182
Unauthenticated reflected XSS affects BBQ Pro plugin (WordPress) up to version 3.9, rated CVSS 7.1 (HIGH). No exploitation or patch details are provided; CISA SSVC assesses partial technical impact. Upgrade to a version newer than 3.9 once available and monitor Patchstack advisories. Exploitation...
CVE-2026-73182 WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
CVE-2026-73182 WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability
Account Takeover vulnerability discovered by 0xd4rk5id3 in WordPress Plugin User Registration & Membership Pro versions = 5.4.5...
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Cafe Pro versions 3.0.15...
WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin BBQ Pro versions = 3.9...
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
SQL Injection vulnerability discovered by johska in WordPress Plugin Maps Marker Pro versions = 4.32...
Malicious code in ranux-pro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535aa6b18b45b3ade8ae934157747b2a3281c298e38c7a8aa308236ba3c941a2 package.json advertises the package as a 'High-performance async network socket & runtime protocol engine', but the tarball ships a multi-tenant...
PT-2026-78533
Name of the Vulnerable Software and Affected Versions Elementor Pro versions prior to 4.2.2 Description An unrestricted file upload flaw exists in the Form widget of Elementor Pro, potentially affecting over 6 million active installations. The issue occurs when a public form contains at least one...
