KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J…
Subscriber Broken Access Control in FormGent <= 1.12.2 versions.
Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.
Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions.
Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions.
Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2.
Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions.
Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions.
Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions.
Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions.
Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.
Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions.
Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.
Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions.
In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set. The WS-SecurityPolicy enforcer uses that flag to decide whether an element needs checking, so it…
Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.
Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-95616 An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose… |
Monitoruj |
CVSS 7,5EPSS 0,41 % | ||
| CVE-2026-94499 Subscriber Broken Access Control in FormGent <= 1.12.2 versions. |
Monitoruj |
CVSS 7,1EPSS 0,28 % | ||
| CVE-2026-94677 Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions. |
Monitoruj |
CVSS 7,2EPSS 0,39 % | ||
| CVE-2026-94678 Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-94683 Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. |
Monitoruj |
CVSS 8,8EPSS 0,34 % | ||
| CVE-2026-94123 Unauthenticated Arbitrary File Download in NextGEN Gallery <= 4.5.0 versions. |
Monitoruj |
CVSS 7,5EPSS 0,39 % | ||
| CVE-2026-94177 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects… |
Monitoruj |
CVSS 8,5EPSS 0,25 % | ||
| CVE-2026-94178 Subscriber Privilege Escalation in Import and export users and customers <= 2.5.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-94082 Author SQL Injection in Quiz Cat <= 3.1.1 versions. |
Monitoruj |
CVSS 7,6EPSS 0,27 % | ||
| CVE-2026-94115 Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions. |
Monitoruj |
CVSS 8,5EPSS 0,25 % | ||
| CVE-2026-94120 Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms <= 2.7.2 versions. |
Monitoruj |
CVSS 7,5EPSS 0,28 % | ||
| CVE-2026-94121 Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. |
Monitoruj |
CVSS 8,8EPSS 0,37 % | ||
| CVE-2026-94122 Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. |
Monitoruj |
CVSS 7,2EPSS 0,36 % | ||
| CVE-2026-94076 Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions. |
Monitoruj |
CVSS 8,8EPSS 0,34 % | ||
| CVE-2026-94078 Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,19 % | ||
| CVE-2026-94081 Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-93514 Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-93621 Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. |
Monitoruj |
CVSS 8,2EPSS 0,25 % | ||
| CVE-2026-93624 Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. |
Monitoruj |
CVSS 7,2EPSS 0,36 % | ||
| CVE-2026-93651 Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. |
Monitoruj |
CVSS 7,2EPSS 0,36 % | ||
| CVE-2026-93770 Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions. |
Monitoruj |
CVSS 7,1EPSS 0,19 % | ||
| CVE-2026-93771 Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. |
Monitoruj |
CVSS 7,2EPSS 0,36 % | ||
| CVE-2026-92121 In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an internal "inside signed content" flag permanently set. The WS-SecurityPolicy… |
Monitoruj |
CVSS 7,5EPSS 0,55 % | ||
| CVE-2026-93512 Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions. |
Monitoruj |
CVSS 7,1EPSS 0,18 % | ||
| CVE-2026-62085 Administrator SQL Injection in WP Activity Log <= 5.6.6 versions. |
Monitoruj |
CVSS 7,6EPSS 0,31 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 12.11.2026, 23:02 UTC – 13.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.