CVE-2026-65544

The vulnerability CVE-2026-65544 affects the WordPress plugin Super Socializer (versions <= 7.14.5). It is an unauthenticated Cross-Site Scripting (XSS) flaw in the plugin’s handling of input, with a CVSS v3.1 base score of 7.1 (HIGH) and network attack vector, requiring user interaction. No e...

EUVD-2026-53974

Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...

CVE-2026-65542

Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...

CVE-2026-65542 WordPress Super Socializer plugin <= 7.14.5 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...

EUVD-2026-53972

Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...

CVE-2026-65542

CVE-2026-65542 concerns the WordPress WordPress Super Socializer plugin, affected versions

EUVD-2026-53695

A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function getfilecontent of the file server.py of the component executetoolmanually Endpoint. The manipulation of the argument toolname/toolparams results in information disclosure. The attack can be launched...

CVE-2026-18974

CVE-2026-18974 affects the heshengtao super-agent-party software (up to 0.4.1). The vulnerability lies in the execute_tool_manually Endpoint’s server.py get_file_content function, where manipulating the tool_name/tool_params arguments can disclose information. It can be exploited remotely, and pu...

CVE-2026-18974

A vulnerability was found in heshengtao super-agent-party up to 0.4.1. This affects the function getfilecontent of the file server.py of the component executetoolmanually Endpoint. The manipulation of the argument toolname/toolparams results in information disclosure. The attack can be launched...

EUVD-2026-53694

A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...

CVE-2026-18973

The CVE-2026-18973 entry concerns heshengtao super-agent-party (

CVE-2026-18973

A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...

CVE-2026-18973 heshengtao super-agent-party extension_proxy Route server.py sanitize_proxy_url server-side request forgery

A vulnerability has been found in heshengtao super-agent-party up to 0.4.1. The impacted element is the function sanitizeproxyurl of the file server.py of the component extensionproxy Route. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated...

WordPress Super Progressive Web Apps plugin <= 2.2.43 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by lucsob in WordPress Plugin Super Progressive Web Apps versions = 2.2.43...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12965

The CVE-2026-12965 entry concerns the WordPress plugin Super Store Finder (versions up to 7.8). It describes an issue where a parameter from an unauthenticated AJAX action is not sanitized before being used in a SQL query, enabling SQL injection and data extraction from the database. This is the ...

CVE-2026-12965 Super Store Finder < 7.11 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

EUVD-2026-52169

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12965

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

EUVD-2026-51434

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilteredhtml capability to save them, allowing users with administrative capabiliti...