#
20 entries
2026-07-27
ID: 414
CVE-2026-65537 - WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability
2026-07-27
ID: 413
CVE-2026-65538 - WordPress Machete plugin <= 5.2 - Cross Site Scripting (XSS) vulnerability
2026-07-27
ID: 412
CVE-2026-65539 - WordPress Kwayy HTML Sitemap plugin <= 4.0 - CSRF to Stored XSS vulnerability
2026-07-27
ID: 411
CVE-2026-65540 - WordPress Popup for CF7 with Sweet Alert plugin <= 1.6.5 - Cross Site Request Forgery (CSRF) vulnerability
2026-07-27
ID: 410
CVE-2026-65550 - WordPress Tabs plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability
2026-07-27
ID: 409
CVE-2026-15794 - Grid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode Attribute
2026-07-27
ID: 408
CVE-2026-14282 - GoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload Field
2026-07-27
ID: 405
CVE-2026-65430 - Joomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extension
2026-07-27
ID: 404
CVE-2026-64799 - Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions
2026-07-27
ID: 403
CVE-2026-64874 - Joomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extension
2026-07-27
ID: 402
CVE-2026-65756 - Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension
2026-07-27
ID: 401
CVE-2026-65712 - Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension
2026-07-27
ID: 400
CVE-2026-64872 - Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension
2026-07-27
ID: 399
CVE-2026-64876 - Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension
2026-07-27
ID: 398
CVE-2026-64875 - Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension
2026-07-27
ID: 397
CVE-2026-65754 - Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension
2026-07-27
ID: 396
CVE-2026-65755 - Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension