22289 matches found
CVE-2026-73183: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
VulnCheck KEV: CVE-2026-32475
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
PT-2026-78333
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
CVE-2026-52480
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-52481
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcpactions function...
CVE-2026-73360
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-68567
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-66633
Unauthenticated Cross Site Scripting XSS in Fluent Forms Pro Add On Pack 6.2.12 versions...
CVE-2026-28192
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro = 7.1.67 versions...
CVE-2026-73360 WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-73360
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
CVE-2026-73360
The WordPress Chaty Pro plugin (versions ≤ 3.5.8) has an unauthenticated reflected/stored XSS flaw exploitable over the network with low complexity; Patchstack rates it HIGH (CVSS 7.1). Upgrade beyond 3.5.8 to mitigate. No in-the-wild exploitation reported. https://patchstack.com/database/wordpre...
CVE-2026-73360 WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
EUVD-2026-60784
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
EUVD-2026-60935
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-68567 WordPress Convert Pro plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-68567 WordPress Convert Pro plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Convert Pro = 1.0.1 versions...
CVE-2026-68567
The WordPress Convert Pro plugin (versions ≤ 1.0.1) contains an unauthenticated reflected/stored XSS flaw exploitable via network access with low complexity; CVSS 7.1 (High). Patchstack reports it. Upgrade to a patched version if available; no exploitation evidence provided. See https://patchstac...