18096 matches found
CVE-2026-15420: Improper Limitation of a Pathname to a Restricted Directory
The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 5.0.0 via the 'plusname' parameter. This makes it possible for authenticated attackers, with subscriber-level access and above, t...
CVE-2026-59544
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
CVE-2026-59517
Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...
CVE-2026-57373
Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...
CVE-2026-57374
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-59544 WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
CVE-2026-59544
The CVE covers WordPress Thrive Quiz Builder plugin versions
CVE-2026-59544 WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
EUVD-2026-48197
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
CVE-2026-59517 WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...
EUVD-2026-48188
Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...
CVE-2026-59517 WordPress Easy Form Builder plugin <= 4.0.12 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...
CVE-2026-59517
CVE-2026-59517 concerns the WordPress plugin Easy Form Builder (versions <= 4.0.12). The supplied documents confirm an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting this plugin, with the affected component/version explicitly stated as Easy Form Builder
EUVD-2026-48165
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-57374
CVE-2026-57374 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Funnel Kit Funnel Builder PRO plugin, versioned <= 3.15.0.7. The CVSS v3.1 base score is 7.1 (HIGH) with NETWORK attack vector, LOW impacts to confidentiality/integrity/availability, and user ...
CVE-2026-57374 WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-57374 WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
CVE-2026-57373 WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability
Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...