CVE-2026-0745

The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'downloadlanguage' function. This makes it possible for authenticated attackers, with Administrator-level access and above, ...

PT-2023-13591 · WordPress · Eu Cookie Law For Gdpr/Ccpa

Name of the Vulnerable Software and Affected Versions: The EU Cookie Law for GDPR/CCPA WordPress plugin versions 3.1.6 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

PT-2020-15419 · Jenkins · Jenkins Vncrecorder Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins VncRecorder Plugin versions 1.25 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the tool path in the checkVncServ form validation endpoint is not properly escaped...