767 matches found
CVE-2026-96570
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...
CVE-2026-96570
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.67 . The root cause is insufficient input sanitization and output escaping of the saswp_review_text parameter. This allows unauthenticated attack...
CVE-2026-96570 Schema & Structured Data for WP & AMP <= 1.67 - Unauthenticated Stored Cross-Site Scripting via 'saswp_review_text' Parameter
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...
EUVD-2026-102657
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...
CVE-2026-96570: Improper Neutralization of Input During Web Page Generation
The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswpreviewtext' parameter in all versions up to, and including, 1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...
WordPress Schema & Structured Data for WP & AMP plugin <= 1.67 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by r3foxx in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.67...
Cisco Secure Email Gateway 16.0 AMP Arbitrary File Write
Cisco Secure Email Gateway versions 13.0 through 16.0 prior to Content Scanner Tools package 25.3.0.5525 contain a relative path traversal vulnerability in AMP File Reputation attachment handling that allows unauthenticated arbitrary file write...
CVE-2026-76519
A vulnerability in the Advanced Malware Protection AMP feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips, clickhouse-backup-fips, witness...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
CVE-2026-97032 vulnerabilities
Vulnerabilities for packages: chainloop-cli-fips, syft, docker-credential-ecr-login, crossplane-provider-azure-purview, crossplane-provider-aws-appconfig, prom-label-proxy, google-guest-agent-manager, sops, kubectx, kubernetes-event-exporter-fips, crossplane-provider-aws-kinesisanalytics-fips,...
@ampproject/eleventy-plugin-amp (>=0.5.6, <=0.5.8), @ampproject/toolbox-cli (>=2.0.0-alpha.0, <=3.0.0-canary.2) +32 more potentially affected by CVE-2026-104861 via probe-image-size (>=7.0.0, <=7.3.0)
probe-image-size NPM version =7.0.0, =0.5.6, =2.0.0-alpha.0, =2.8.0-canary.6, =2.8.8, =14.9.23-prev, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =1.2.0, =1.2.0, =1.1.2, =1.0.0-beta.2, =1.0.0-beta.37 and more Source cves: CVE-2026-104861 Source advisory: MEND:CVE-2026-104861...
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...