xuxueli__xxl-job_CVE-2020-29204_2-2-0

XXL-JOB XXL-JOB, un framework de programación de tareas distribuidas. -- Página Principal -- Introducción XXL-JOB es un framework de programación de tareas distribuidas. S...

CVE-2024-50967

CVE-2024-50967 DATAGERRY Broken Access Control This vulnerability affects DATAGERRY platform in all versions up to and including 2.2.0 ≤2.2.0...

EUVD-2026-64801

Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...

CVE-2026-49245

SFTPGo (open-source file transfer solution) versions 2.2.0 through 2.7.3 are affected by a stored XSS vulnerability. The inline query parameter on browsable-share and authenticated user-file download endpoints suppressed Content-Disposition: attachment, allowing an attacker-placed HTML file in a ...

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3

CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...

CVE-2026-27391

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27392 WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

Contributor Broken Access Control in uListing = 2.2.0 versions...

EUVD-2026-48155

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27392 WordPress uListing plugin <= 2.2.0 - Broken Access Control vulnerability

Contributor Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-27392

CVE-2026-27392 affects the WordPress uListing plugin

PT-2026-63814

Contributor Broken Access Control in uListing = 2.2.0 versions...

PT-2026-63813

Subscriber Broken Access Control in uListing = 2.2.0 versions...

CVE-2026-9734

The W3SC Elementor to Zoho CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the storeInfo function. This makes it possible for unauthenticated attackers to modify the plugin's...

PT-2026-60920

Name of the Vulnerable Software and Affected Versions W3SC Elementor to Zoho CRM versions prior to 2.2.1 Description The plugin is subject to Cross-Site Request Forgery CSRF, a flaw where an attacker tricks a victim into performing actions they did not intend to do. This occurs due to missing or...

EUVD-2026-45253

JSONata is a JSON query and transformation language. Prior to 2.2.0, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions. This issu...

CVE-2026-52746

CVE-2026-52746 concerns the JSONata language. Affected: jsonata prior to version 2.2.0. Issue: malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications evaluating JSONata expressions. ...

CVE-2026-52746 JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion

JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evaluate user-provided JSONata expressions...

WordPress W3SC Elementor to Zoho CRM plugin <= 2.2.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by ? in WordPress Plugin W3SC Elementor to Zoho CRM versions = 2.2.0...

PT-2026-57682

Improper Validation of Specified Quantity in Input vulnerability in WPDeveloper Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More better-payment allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Better Payment – Instant Payments,...

EUVD-2025-210456

The Catalyst Connect Zoho CRM Client Portal plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uid’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...