CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-108039 NONE By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large…
- CVE-2026-107938 NONE In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being called.…
- CVE-2026-107937 NONE In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attachment-headers-max-count (default 500) limits.…
- CVE-2026-100227 NONE Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors (XmlSigInHandler, XmlSigInInterceptor and the streaming XmlSecInInterceptor) did…
- CVE-2026-96809 CRITICAL · 9.3 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een kwetsbaarheid van SQL Command ('SQL Injection') in MultiNet Interactive AB EduAdmin Booking eduadmin-booking maakt Blind…
- CVE-2026-96761 HIGH · 7.1 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('Cross-site Scripting') kwetsbaarheid in Welcart Welcart e-Commerce usc-e-shop maakt Reflected XSS mogelijk. Dit probleem heeft invloed…
- CVE-2026-96671 HIGH · 8.8 Cross-Site Request Forgery (CSRF) -kwetsbaarheid in FIFA.app Uitgelichte afbeelding van URL featured-image-from-url maakt Cross Site Request Forgery mogelijk. Dit probleem heeft invloed op Uitgelichte afbeelding…
- CVE-2026-96607 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.1.
- CVE-2026-96553 HIGH · 7.1 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('Cross-site Scripting') kwetsbaarheid in Damian Góra FiboSearch ajax-search-for-woocommerce staat Reflected XSS toe. Dit probleem heeft invloed…
- CVE-2026-96539 MEDIUM · 5.6 Onjuiste kwetsbaarheid voor Privilege-toewijzing in Ultimate Member Ultimate Member Ultimate Member staat Privilege-escalatie toe. Dit probleem heeft invloed op Ultimate Member: van n.v.t. tot en…
- CVE-2026-96518 MEDIUM · 5.9 Ontbrekende autorisatiekwetsbaarheid in properfraction ProfilePress wp-user-avatar staat het exploiteren van onjuist geconfigureerde toegangscontrolebeveiligingsniveaus toe. Dit probleem heeft invloed op ProfilePress: van n.v.t. tot en met…
- CVE-2026-96461 HIGH · 7.5 Ontbrekende kwetsbaarheid voor autorisatie in TMS Amelia ameliabooking maakt het mogelijk om onjuist geconfigureerde toegangscontrolebeveiligingsniveaus te exploiteren. Dit probleem heeft invloed op Amelia: van n.v.t.…
- CVE-2026-96337 MEDIUM · 6.5 Ontbrekende autorisatiekwetsbaarheid in properfraction ProfilePress wp-user-avatar staat het exploiteren van onjuist geconfigureerde toegangscontrolebeveiligingsniveaus toe. Dit probleem heeft invloed op ProfilePress: van n.v.t. tot en met…
- CVE-2026-96336 HIGH · 7.5 Authentication Bypass by Spoofing kwetsbaarheid in WPMU DEV FORMINATOR FORMINATOR staat Identity Spoofing toe. Dit probleem heeft invloed op Forminator: van n.v.t. tot en met…
- CVE-2026-96334 MEDIUM · 5.6 Ontbrekende kwetsbaarheid voor autorisatie in ThemeGrill gebruikersregistratie gebruikersregistratie maakt het mogelijk om onjuist geconfigureerde toegangscontrolebeveiligingsniveaus te exploiteren. Dit probleem heeft invloed op gebruikersregistratie: van n.v.t.…
- CVE-2026-96333 HIGH · 7.5 Authenticatie Bypass by Spoofing kwetsbaarheid in Liquid Web /StellarWP GiveWP maakt Identity Spoofing mogelijk. Dit probleem heeft invloed op GiveWP: van n.v.t. tot en met…
- CVE-2026-96332 HIGH · 7.1 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('Cross-site Scripting') kwetsbaarheid in yalla ya! Simple Payment simple-payment staat Reflected XSS toe. Dit probleem heeft…
- CVE-2026-96331 CRITICAL · 9.3 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een SQL Command ('SQL Injection') -kwetsbaarheid in wpdreams Ajax Search Pro ajax-search-pro maakt Blind SQL Injection…
- CVE-2026-96330 CRITICAL · 9.3 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een kwetsbaarheid van een SQL-opdracht ('SQL-injectie') in tagDiv tagDiv Opt-In Builder td-abonnement maakt blinde SQL-injectie mogelijk.…
- CVE-2026-96329 HIGH · 8.5 Onjuiste neutralisatie van speciale elementen die worden gebruikt in een kwetsbaarheid van een SQL-opdracht ('SQL-injectie') in tagDiv tagDiv Opt-In Builder td-abonnement maakt blinde SQL-injectie mogelijk.…
- CVE-2026-96328 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This issue…
- CVE-2026-96327 CRITICAL · 9.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WPLMS: from…
- CVE-2026-95610 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution…
- CVE-2026-95609 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary…
- CVE-2026-95608 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.
- CVE-2026-95607 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS :…
- CVE-2026-95599 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from…
- CVE-2026-95598 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place:…
- CVE-2026-95597 MEDIUM · 6.5 Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through…
- CVE-2026-95596 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue…
- CVE-2026-95591 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects…
- CVE-2026-95589 MEDIUM · 6.5 Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Deposits and…
- CVE-2026-94668 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking…
- CVE-2026-94667 MEDIUM · 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetReviews: from n/a through 3.1.2.
- CVE-2026-94666 HIGH · 7.5 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue…
- CVE-2026-94665 MEDIUM · 6.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from…
- CVE-2026-94664 HIGH · 7.5 Onjuiste beperking van een padnaam tot een beperkte map ('Path Traversal') kwetsbaarheid in add-ons.org PDF voor Contact Form 7 pdf-for-contact-form-7 maakt Path Traversal mogelijk. Dit…
- CVE-2026-94663 HIGH · 8.5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from…
- CVE-2026-94661 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.
- CVE-2026-94641 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.
- CVE-2026-94632 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blocks allows Reflected XSS.This issue affects…
- CVE-2026-94568 HIGH · 7.2 Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce:…
- CVE-2026-94503 CRITICAL · 10.0 Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from…
- CVE-2026-94415 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a through 28.5.8.
- CVE-2026-94170 HIGH · 7.1 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('Cross-site Scripting') kwetsbaarheid in Heateor Support Sassy Social Share Sassy-social-share maakt Reflected XSS mogelijk. Dit probleem…
- CVE-2026-94167 HIGH · 7.1 Onjuiste neutralisatie van invoer tijdens het genereren van webpagina's ('Cross-site Scripting') kwetsbaarheid in Extend Themes Kubio AI Page Builder kubio staat Reflected XSS toe. Dit…
- CVE-2026-94166 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a…
- CVE-2026-94161 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a…
- CVE-2026-94159 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue affects Total Donations: from n/a…
- CVE-2026-94158 HIGH · 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue affects Gloria Admin Panel:…