CVE-2026-3327

This CVE concerns the DatoCMS Web Previews plugin, where an authenticated user can perform an iframe injection by bypassing the frontend URL restriction. The root cause is an insecure handling of embedded resources in the Web Previews feature, affecting versions earlier than 1.0.31. Impact is the...

CVE-2025-58677 WordPress ShrinkTheWeb (STW) Website Previews Plugin <= 2.8.5 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in puravida1976 ShrinkTheWeb STW Website Previews shrinktheweb-website-preview-plugin allows Stored XSS.This issue affects ShrinkTheWeb STW Website Previews: from n/a through = 2.8.5...

CVE-2019-15006: Improper Control of Dynamically-Managed Code Resources

There was a man-in-the-middle MITM vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence...

PT-2019-13931

Name of the Vulnerable Software and Affected Versions Confluence Server affected versions not specified Confluence Data Center affected versions not specified Description A man-in-the-middle MITM issue was found in the Confluence Previews plugin, which is used for communication with the Atlassian...