92234 matches found
CVE-2026-57651: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...
CVE-2026-57648: Missing Authorization
Contributor Broken Access Control in Nelio Content = 4.3.4 versions...
CVE-2026-57646: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in Majestic Support = 1.1.7 versions...
CVE-2026-57645: Missing Authorization
newsletterssubscribers Broken Access Control in Newsletters = 4.13 versions...
CVE-2026-57634: Authorization Bypass Through User-Controlled Key
Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...
CVE-2026-57631: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in Popup box = 6.0.1 versions...
CVE-2026-57627: Server-Side Request Forgery (SSRF)
Subscriber Server Side Request Forgery SSRF in Kirki = 6.0.11 versions...
CVE-2026-57618: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...
CVE-2026-57622: Missing Authorization
Subscriber Broken Access Control in WPCafe = 3.0.14 versions...
CVE-2026-57325: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in NanoMag = 1.8 versions...
CVE-2026-57323: Missing Authorization
Unauthenticated Broken Access Control in Flash & HTML5 Video = 2.11.0 versions...
CVE-2026-57318: Insertion of Sensitive Information Into Sent Data
Subscriber Sensitive Data Exposure in Site Reviews = 8.0.11 versions...
CVE-2026-57317: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.2 versions...
CVE-2026-57316: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Subscriber Sensitive Data Exposure in GetGenie = 4.4.2 versions...
CVE-2026-57314: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SureCart = 4.3.2 versions...
CVE-2026-57312: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Everest Forms = 3.4.8 versions...
CVE-2026-56072: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WoodMart = 8.5.3 versions...
CVE-2026-56069: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in Toolset Forms = 2.6.24 versions...