Lucene search
+L

274190 matches found

CVE
CVE
added 2026/08/19 5:24 p.m.166 views

CVE-2026-32475

Elementor Pro WordPress plugin (≈6,000,000 active installations) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.2.1 . The root cause is a logic error in the Upload::validation() function where return is used instead of continue when the first array el...

9CVSS5.2AI score0.00645EPSS
SaveIn wildExploits1References2
Cvelist
Cvelist
added 2026/08/19 5:24 p.m.48 views

CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

9CVSS0.00645EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/08/19 5:24 p.m.13 views

CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...

9CVSS5.2AI score0.00645EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2026/08/19 5:17 p.m.15 views

WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin Elementor Pro versions = 4.2.1...

9CVSS5.3AI score0.00645EPSS
SaveExploits1References2Affected Software1
Kitploit
Kitploit
added 2026/08/19 1:23 p.m.1 views

wpprobe

"因为当WordPress自己暴露时,为什么要盲目扫描?" WPProbe 一个快速的WordPress插件和主题扫描器,通过REST API枚举检测已安装的插件,通过HTML发现主题,并将其映射到已知漏洞。可检测超过5000个插件而无需暴力破解,开启暴力破解后可检测数千个更多插件。 重要:Wordfence API变更 自2026年3月9日起,Wordfence弃用了他们的v2 API。所有v0.10.16之前的WPProbe版本的update-db功能已损坏。您需要更新WPProbe。 默认情况下,wpprobe...

9.8CVSS0.01593EPSS
SaveExploits13References5
NVD
NVD
added 2026/08/19 1:18 p.m.4 views

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido = 1.5 versions...

8.1CVSS0.00282EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

9.8CVSS0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73390

Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...

9.8CVSS0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73391

Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...

9.3CVSS0.00241EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73364

Customer PHP Object Injection in Flexible Subscriptions = 1.8.1 versions...

9.8CVSS0.00313EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.4 views

CVE-2026-73385

Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...

7.5CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73384

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...

7.5CVSS0.00245EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73354

Unauthenticated Cross Site Scripting XSS in SimplyRETS Real Estate IDX = 3.2.8 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.6 views

CVE-2026-73347

Unauthenticated Privilege Escalation in TrueBooker = 1.2.6 versions...

9.8CVSS0.00268EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.4 views

CVE-2026-73184

Unauthenticated Cross Site Scripting XSS in Global Gallery = 11.1.2 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.8 views

CVE-2026-73182

Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:17 p.m.6 views

CVE-2026-66613

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

9.8CVSS0.00478EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:17 p.m.6 views

CVE-2026-66596

Unauthenticated Cross Site Scripting XSS in Newsletter = 9.3.3 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:17 p.m.5 views

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

8.5CVSS0.00278EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:17 p.m.4 views

CVE-2026-61986

Unauthenticated Cross Site Scripting XSS in Contest Gallery = 30.0.5 versions...

7.1CVSS0.00146EPSS
SaveExploits0References1
Rows per page
Query Builder