CVE-2026-104413 Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images

Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark card image fetching. Attackers can create bookmark cards that store non-image files from external websites as icons or...

CVE-2026-104411 Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads

Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived content types on the default local storage adapter. Attackers can upload script-bearing files to the site's domain to...

cve-2026-34472-auth-bypass-zte-h188a-router

CVE-2026-34472 CVE-2026-34472에 대한 기술 분석: ZTE ZXHN H188A V6 펌웨어에 영향을 미치는, 유출된 자격 증명을 통한 인증 우회 취약점입니다. 요약 테스트한 H188A V6 빌드에서는 루트 경로에 대한 인증되지 않은 요청이 로그인 전 마법사 핸들러에 도달하여 다음을 포함한 민감한 데이터를 노출할 수 있습니다. WLAN PSK SSID PPPoE 사용자 이름 이후 대문자 변환 후 기본 관리자 비밀번호로 재사용되는 Wi-Fi 비밀번호 이 취약점이 단순 정보 노출에 그치지 않고 인증 우회로 이어...

By-Poloss..-..CVE-2026-10580

CVE-2026-10580: WooCommerce용 Hippoo 모바일 앱 = 1.9.4 - 인증되지 않은 인증 우회를 통한 관리자 계정 탈취 인증되지 않은 사용자 → 논리적 오류를 통한 관리자 계정 탈취 📌 요약 | ---|--- CVE| CVE-2026-10580 플러그인| Hippoo Mobile App for WooCommerce 버전| ≤ 1.9.4 CVSS| 9.8 심각 인증 필요| ❌ 아니오 관리자 탈취| ✅ 예 WooCommerce 데이터| ✅ 전체 액세스 🧠 원인 요약 getuserpermissions 함수는...

CVE-2026-8181

CVE-2026-8181 - Burst Statistics 인증 우회 CVSS 9.8 Critical — 인증 우회로 관리자 계정 탈취 설명 CVE-2026-8181은 WordPress 플러그인 Burst Statistics 버전 3.4.03.4.1.1 의 인증 우회Authentication Bypass 취약점입니다. 이 플러그인은 Google Analytics의 개인정보 보호 친화적인 대안으로 200,000개 이상의 WordPress 사이트 에서 사용됩니다. 이 취약점으로 인해 관리자 사용자 이름 을 아는 인증되지 않은 공격...

Teldat-Router-CVE-2022-POC

Teldat 라우터 CVE-2022-39996 & CVE-2022-39997 POC Teldat RS123 / RS123w 라우터에서 발견된 두 가지 취약점에 대한 개념 증명PoC입니다. 개요 CVE ID| 유형| CWE| CVSS| 심각도 ---|---|---|---|--- CVE-2022-39996| 반사형 XSS| CWE-79| 6.1| 중간 CVE-2022-39997| 약한 암호| CWE-521| 9.8| 심각 영향 받는 제품: Teldat RS123, RS123w 라우터 CVE-2022-39997 - 약한 암호 설명...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

EUVD-2026-91253

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756 Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in Admin Builder Preview in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output...

CVE-2026-93756

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin (all versions up to and including 4.13.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when handling Facebook Comment Messages via v-html in...

CVE-2026-100182 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-100182 Download Monitor <= 5.2.10 - Unauthenticated Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor

The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-102565

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingserviceqty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-1661 WP Mail Logging < 1.17.0 - Unauthenticated HTML Injection

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

EUVD-2026-91208

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

CVE-2026-1661 WP Mail Logging < 1.17.0 - Unauthenticated HTML Injection

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

MakeMeEnterpriseAdmin

성공적인 실행 예시: ====================================================================== /\ Elevated domain admins to Enterprise admins - version 1.0 || /||\ Require: domain admin right |:||:| or more specifically DS-Replication-Get-Changes-All |/||| Vincent LE TOUX [email protected]...

CVE-2026-102565 BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingserviceqty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-91203

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookingserviceqty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

MAL-012

MAL-012: Payara Server Admin Console의 반사형 크로스 사이트 스크립팅으로 인한 원격 코드 실행 Payara Admin Console에서 반사형 크로스 사이트 스크립팅XSS 공격이 발견되었습니다. 관리자 사용자가 악성 URL에 접속하고 “Choose File” 버튼을 클릭하도록 유도함으로써, 공격자는 임의의 JavaScript 코드를 실행하여 사용자를 사칭하고 관리자 기능을 악의적인 목적으로 악용할 수 있습니다. XSS가 Payara Admin Console에 존재하기 때문에, 공격자는 이를 사용하여...