600446 matches found
CVE-2026-16080
CVE-2026-16080 affects the WordPress plugin “Image Uploader for Welcart” (authenticated scenario). The vulnerability is a generic SQL injection in the attachment field post_title for versions up to 1.4.6, caused by insufficient escaping of user input and lack of proper query preparation. Impact d...
CVE-2026-16080
The Image Uploader for Welcart plugin for WordPress is vulnerable to generic SQL Injection via the 'posttitle' parameter in all versions up to, and including, 1.4.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...
CVE-2026-14484
CVE-2026-14484 affects the RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress. The vulnerability is an arbitrary file deletion flaw caused by insufficient file path validation in the handleAjaxRemoveUpload function, present in all versions up to and including 1.0.4. This ...
CVE-2026-14433 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter
The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'businessid' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-58833
The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'businessid' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-14433
The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'businessid' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-18503 vulnerabilities
Vulnerabilities for packages: python...
MINI-9V8W-PR4J-2MV4
Bulletin has no description...
MINI-9FMM-FFGH-8P39
Bulletin has no description...
MINI-VQ6W-83HM-PHQ5
Bulletin has no description...
MINI-2PQJ-XP9G-JF35
Bulletin has no description...
MINI-285X-W5C5-2G39
Bulletin has no description...
MINI-2RRW-66PJ-QR4W
Bulletin has no description...
MINI-472V-CXJF-HG5J
Bulletin has no description...
MINI-2RQ8-QV8Q-PW69
Bulletin has no description...
MINI-VWH6-4X4G-V5QR
Bulletin has no description...
MINI-724R-XX7G-QW59
Bulletin has no description...
MINI-WHR8-9P5R-2FFH
Bulletin has no description...