Lucene search
+L

978 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•7 views

CVE-2026-32532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Contact Form & Lead Form Elementor Builder lead-form-builder allows Stored XSS.This issue affects Contact Form & Lead Form Elementor Builder: from n/a through = 2.0.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•32 views

WordPress plugin Contact Form & Lead Form Elementor Builder 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

7.1CVSS5.6AI score0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/19 10:58 p.m.•8 views

CVE-2026-29105 SuiteCRM has Unauthenticated Open Redirect in Leads WebToLead Capture

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an unauthenticated open redirect vulnerability in the WebToLead capture functionality. A user-supplied POST parameter is used as a redirect...

5.4CVSS5.9AI score0.00271EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/19 10:58 p.m.•34 views

CVE-2026-29105 SuiteCRM has Unauthenticated Open Redirect in Leads WebToLead Capture

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to versions 7.15.1 and 8.9.3, SuiteCRM contains an unauthenticated open redirect vulnerability in the WebToLead capture functionality. A user-supplied POST parameter is used as a redirect...

5.4CVSS0.00271EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/19 6:30 a.m.•25 views

EUVD-2026-13059

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9CVSS6AI score0.01567EPSS
SaveExploits3References2
EUVD
EUVD
•added 2026/03/19 6:30 a.m.•27 views

EUVD-2026-13045

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9.8CVSS5.8AI score0.01775EPSS
SaveExploits1References2
NVD
NVD
•added 2026/03/19 6:16 a.m.•20 views

CVE-2026-27542

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9.8CVSS0.01775EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/19 6:16 a.m.•25 views

CVE-2026-27540

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS0.01567EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
•added 2026/03/19 5:24 a.m.•7 views

CVE-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9CVSS6AI score0.01567EPSS
SaveExploits3References1
Cvelist
Cvelist
•added 2026/03/19 5:24 a.m.•48 views

CVE-2026-27540 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS0.01567EPSS
SaveExploits3References1
CVE
CVE
•added 2026/03/19 5:24 a.m.•165 views

CVE-2026-27540

CVE-2026-27540 is an unauthenticated arbitrary file upload vulnerability in the WordPress WooCommerce Wholesale Lead Capture plugin (

9CVSS6AI score0.01567EPSS
SaveIn wildExploits3References1
attackerkb
attackerkb
•added 2026/03/19 5:24 a.m.•9 views

CVE-2026-27540

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9CVSS6AI score0.01567EPSS
SaveExploits3References2
CVE
CVE
•added 2026/03/19 5:22 a.m.•70 views

CVE-2026-27542

CVE-2026-27542 and CVE-2026-27540 affect the WordPress WooCommerce Wholesale Lead Capture plugin up to version 2.0.3.1. CVE-2026-27542 is an unauthenticated privilege-escalation in wwlc_create_user that can inject arbitrary WordPress capabilities (including administrator) during registration, ena...

9.8CVSS5.9AI score0.01775EPSS
SaveIn wildExploits1References1
Cvelist
Cvelist
•added 2026/03/19 5:22 a.m.•48 views

CVE-2026-27542 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9.8CVSS0.01775EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/03/19 5:22 a.m.•11 views

CVE-2026-27542

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9.8CVSS5.9AI score0.01775EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/03/19 5:22 a.m.•8 views

CVE-2026-27542 WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through 2.0.3.1...

9.8CVSS5.9AI score0.01775EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•4 views

CVE-2026-27542: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9.8CVSS5.9AI score0.01775EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/19 12:00 a.m.•2 views

CVE-2026-27540: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Using Malicious Files.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9CVSS6AI score0.01567EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2026/03/19 12:00 a.m.•27 views

WordPress plugin Woocommerce Wholesale Lead Capture 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.8CVSS5.8AI score0.01775EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/19 12:00 a.m.•24 views

WordPress plugin Woocommerce Wholesale Lead Capture 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9CVSS6AI score0.01567EPSS
SaveExploits3References1
Rows per page
Query Builder