Export limit exceeded: 417741 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 107877 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (107877 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-89435 | 2026-10-30 | 8.8 High | ||
| The Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 6.35 via the 'file_url' parameter parameter. This is due to insufficient URL prefix validation in validate_url_is_in_s3_bucket() and a permission callback that relies solely on a shared token obtainable by any user with the delegable frm_view_forms capability, without checking install_plugins or activate_plugins capabilities. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server. Exploitation additionally requires that the site is free-only (Formidable Pro is NOT installed). | ||||
| CVE-2026-76012 | 2 Smub, Wordpress-extensions | 2 Photo Gallery, Sliders, Proofing And Themes – Nextgen Gallery, Nextgen Gallery | 2026-10-30 | 7.5 High |
| The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.4.1 via the legacy_render function. This is due to broken authorization on the Lightroom gallery_edit endpoint combined with mass assignment of gallery path and unrestricted file upload into a registered template directory, whose extension check uses a substring match that accepts sanitized .php_ filenames as valid templates. This makes it possible for authenticated attackers, with custom-level access and above, to execute code on the server. Exploitation requires the authenticated attacker to be the stored author of at least one existing NextGEN gallery, as ownership of that gallery is the sole authorization check gating the mass-assignment and upload steps. | ||||
| CVE-2026-61996 | 2026-10-30 | 8.5 High | ||
| Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | ||||
| CVE-2026-61989 | 2 Merv Barrett, Wordpress-extensions | 2 Easy Property Listings, Easy Property Listings | 2026-10-30 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | ||||
| CVE-2026-54864 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. | ||||
| CVE-2026-42701 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in YayMail <= 4.4.6 versions. | ||||
| CVE-2026-27394 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in Eventer <= 0.1.1 versions. | ||||
| CVE-2026-118085 | 2026-10-30 | 7.1 High | ||
| Unauthenticated Cross Site Scripting (XSS) in GlobalPayments WooCommerce <= 1.23.3 versions. | ||||
| CVE-2026-118083 | 2026-10-30 | 7.5 High | ||
| Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. | ||||
| CVE-2026-118082 | 2 Buddyboss, Wordpress-extensions | 2 Buddyboss Platform, Buddyboss Platform | 2026-10-30 | 8.8 High |
| Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. | ||||
| CVE-2026-118079 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. | ||||
| CVE-2026-118078 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. | ||||
| CVE-2026-118077 | 2026-10-30 | 7.2 High | ||
| Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. | ||||
| CVE-2026-118074 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. | ||||
| CVE-2026-118073 | 2026-10-30 | 8.8 High | ||
| Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. | ||||
| CVE-2026-116869 | 2026-10-30 | 7.2 High | ||
| Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. | ||||
| CVE-2026-116866 | 2026-10-30 | 8.8 High | ||
| Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. | ||||
| CVE-2026-116865 | 2026-10-30 | 7.2 High | ||
| Editor PHP Object Injection in Zippy <= 1.7.0 versions. | ||||
| CVE-2026-116864 | 2026-10-30 | 7.2 High | ||
| Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. | ||||
| CVE-2026-115895 | 1 Capricorn86 | 1 Happy-dom | 2026-10-30 | 8.8 High |
| Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it is a JavaScript binding identifier before inserting it into a generated destructuring binding. With enableJavaScriptEvaluation enabled, attacker-controlled HTML or module source can use an invalid alias that becomes a valid default initializer after compilation, causing the generated JavaScript to execute in the Node.js host process. The demonstrated reachable path uses a JSON module import attribute, which prevents the malicious alias from being emitted again in a later ESM circular-import assignment and keeps the generated function syntactically valid. This incomplete fix for CVE-2026-33943 is a distinct residual path because the earlier remediation validated the local export importName path but not the named-import alias. This issue is fixed in version 21.0.4. | ||||