957 matches found
Wordpress_CVE-2019-9787
WordpressCVE-2019-9787 Docker と WordPress の自動インストールを使用して、この問題を再現してみてください。 CVE-2019-9787 CSRF の PoC WordPress バージョン 5.1 まで CVE-2019-9787 の潜在能力を完全に示すには、nginx/iframe-post.html にあるコメントよりも、もっと厄介なコードが必要でしょう。私のコードでは、WordPress の wpfilterpostkses の欠陥は使用していません。 テスト目的以外では使用しないでください。 bash を使用したインストール：...
CVE-2026-65515
Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...
CVE-2026-65577
WordPress Advice theme,
CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-65543 WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CVE-2026-65541
The CVE concerns WordPress Plugin “Staff Training” versions
CVE-2026-65507
Summary: CVE-2026-65507 affects the WordPress AIWU plugin versions <= 1.5.6 and is described as an unauthenticated privilege escalation. What is affected: WordPress AIWU plugin (
EUVD-2026-53961
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...
EUVD-2026-53942
Unauthenticated PHP Object Injection in Ajax Search Lite = 4.14.4 versions...
CVE-2026-18510 TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content URL-encoded gettext markers in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This make...
CVE-2026-18997 cosmicstack-labs mercury-agent bg agent.ts Agent.handleBgCommand authorization
A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack...
CVE-2026-18895
A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity5g. Performing a manipulation of the argument cipher results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...
WordPress PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin <= 11.2.1 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Win3 in WordPress Plugin PixelYourSite – Your smart PIXEL TAG Manager versions = 11.2.1...
CVE-2026-66433
Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...
CVE-2026-66428
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59535
CVE-2026-59535 affects WordPress Thrive Product Manager plugin
CVE-2026-65524
Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...