|
cve-2026-48839
|
VeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.21%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4883
|
Piotnet piotnet_forms Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
3.06%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4882
|
Unrestricted Upload of File with Dangerous Type |
HIGH
|
N/A
|
0.65%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4798
|
theme-fusion avada_builder Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
0.51%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-45435
|
Melapress wp_activity_log Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.20%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4394
|
Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.29%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4290
|
Missing Authorization |
HIGH
|
N/A
|
0.26%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-42730
|
StylemixThemes masterstudy_lms Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
8.5
|
0.26%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4257
|
supsystic contact_form Improper Control of Generation of Code |
HIGH
|
N/A
|
41.48%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4106
|
Exposure of Sensitive Information to an Unauthorized Actor |
HIGH
|
N/A
|
0.74%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-4003
|
Users manager – PN <= 1.1.15 - Unauthenticated Privilege Escalation via Account Takeover via 'userspn_form_save' AJAX Action |
CRITICAL
|
9.8
|
0.89%
|
cvelistv5 |
2026-07-24 |
|
cve-2026-39447
|
Improper Neutralization of Input During Web Page Generation |
HIGH
|
7.1
|
0.24%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3830
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
0.36%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3629
|
codection import_and_export_users_and_customers Improper Privilege Management |
HIGH
|
N/A
|
0.43%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3355
|
cusrev customer_reviews_for_woocommerce Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.33%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3326
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
1.87%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3279
|
Missing Authorization |
HIGH
|
N/A
|
0.28%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-3045
|
NSquared simply_schedule_appointments Missing Authorization |
HIGH
|
N/A
|
0.31%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-28165
|
Unauthenticated Privilege Escalation in Digits <= 9.2 versions. |
CRITICAL
|
9.8
|
0.48%
|
cvelistv5 |
2026-10-12 |
|
cve-2026-24611
|
Missing Authorization |
CRITICAL
|
9.1
|
0.44%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-2413
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
2.38%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-19949
|
servmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
8.8
|
0.96%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-18391
|
Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.8
|
0.96%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-18315
|
Authorization Bypass Through User-Controlled Key |
HIGH
|
N/A
|
3.03%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-1830
|
Missing Authorization |
CRITICAL
|
9.8
|
8.09%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-18039
|
WPDeveloper essential_addons_for_elementor Improper Privilege Management |
HIGH
|
8.1
|
0.38%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-1666
|
w3eden download_manager Improper Neutralization of Input During Web Page Generation |
HIGH
|
N/A
|
0.30%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-16263
|
weplugins wp_maps Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
8.8
|
0.53%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-15748
|
incsub forminator Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
9.8
|
4.09%
|
cvelistv5 |
2026-10-13 |
|
cve-2026-15381
|
Improper Neutralization of Special Elements used in an SQL Command |
HIGH
|
N/A
|
0.29%
|
cvelistv5 |
2026-10-13 |
ndaal KEV