68 matches found
CVE-2026-110290
The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'otherattributes parsed to inject instanceid + undeclared iswidget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. Thi...
CVE-2026-110290
The WebberZone Top 10 — Popular Posts WordPress plugin (versions up to and including 4.5.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping when processing the other_attributes block attribute to inject an instance_id. By...
EUVD-2026-102790
The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'otherattributes parsed to inject instanceid + undeclared iswidget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. Thi...
CVE-2026-110290 WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute
The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'otherattributes parsed to inject instanceid + undeclared iswidget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. Thi...
PT-2026-115494
Name of the Vulnerable Software and Affected Versions WebberZone Top 10 — Popular Posts versions prior to 4.5.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. By setting...
CVE-2026-110290: Improper Neutralization of Input During Web Page Generation
The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'otherattributes parsed to inject instanceid + undeclared iswidget' parameter in all versions up to, and including, 4.5.2 due to insufficient input sanitization and output escaping. Thi...
CVE-2026-108499
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0...
CVE-2026-108499 WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0...
CVE-2026-108499
The WordPress Knowledge Base plugin (versions 3.2.0 and below ) is vulnerable to a Broken Access Control issue (CWE-862 ). Specifically, a Missing Authorization vulnerability in the knowledgebase component allows attackers to exploit incorrectly configured access control security levels. This vul...
EUVD-2026-102252
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0...
WordPress WebberZone Top 10 — Popular Posts plugin <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Top 10 versions = 4.5.2...
CVE-2026-108499: Missing Authorization
Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base: from n/a through 3.2.0...
EUVD-2026-12812
Missing Authorization vulnerability in WebberZone Contextual Related Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a before 4.2.2...
CVE-2026-32565
Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through 4.2.2...
CVE-2026-32565
Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through 4.2.2...
CVE-2026-32565 WordPress Contextual Related Posts plugin < 4.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through 4.2.2...
PT-2026-26041
Name of the Vulnerable Software and Affected Versions WebberZone Contextual Related Posts versions prior to 4.2.2 Description An authorization issue exists in WebberZone Contextual Related Posts due to incorrectly configured access control security levels. This allows for unauthorized access...
CVE-2023-25993
Missing Authorization vulnerability in WebberZone Top 10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: from n/a through 3.2.3...