DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization

DNN DotNetNuke versions 9.2 through 9.2.2 use a weak encryption algorithm to protect input parameters because of an incomplete fix for CVE-2018-15811. This cryptographic weakness enables attackers to craft malicious DNNPersonalization cookies that can be deserialized, leading to remote code...

WordPress If-So Dynamic Content plugin 1.9.9-1.10.1 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Kaan Özbek in WordPress Plugin If-So Dynamic Content Personalization versions 1.9.9-1.10.1...

CVE-2026-100507

Unauthenticated Cross Site Scripting XSS in If-So Dynamic Content Personalization = 1.10.1 versions...

CVE-2026-100507

The If-So Dynamic Content Personalization plugin for WordPress, version

CVE-2026-100507 WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in If-So Dynamic Content Personalization = 1.10.1 versions...

EUVD-2026-89937

Unauthenticated Cross Site Scripting XSS in If-So Dynamic Content Personalization = 1.10.1 versions...

CVE-2026-100507: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in If-So Dynamic Content Personalization = 1.10.1 versions...

CVE-2026-83331

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83329

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83332

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83327

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SOAP to compromise Oracle Application...

CVE-2026-83328

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-83205

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

EUVD-2026-79685

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-83332

CVE-2026-83332 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite , versions 12.2.9 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker over HTTP (network vector, no user interaction required). Successful exploi...

EUVD-2026-79681

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Application...

CVE-2026-83329

CVE-2026-83329 affects the Personalization component of the Oracle Applications Framework in Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full...

CVE-2026-83331

CVE-2026-83331 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.9 through 12.2.15 . The vulnerability is network-exploitable via HTTP with low complexity and requires only a low-privileged attacker and no user interaction. Succes...

CVE-2026-83328

CVE-2026-83328 affects the Personalization component of Oracle Applications Framework within Oracle E-Business Suite, versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise the framework, resulting in a fu...

EUVD-2026-79682

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Personalization. Supported versions that are affected are 12.2.9-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...