KATALOG PODATNOŚCI

Baza CVE

Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.

Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.

CVE-2026-96607

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue affects NEX-Forms: from n/a through 9.3.1.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,14 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96671

Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL: from n/a through 6.0.7.

MonitorujOpis źródłowy · EN

CVSS: 8,8
EPSS: 0,13 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96761

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.3.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,14 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96332

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple Payment: from n/a through 2.5.4.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,14 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96333

Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.

MonitorujOpis źródłowy · EN

CVSS: 7,5
EPSS: 0,27 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96336

Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

MonitorujOpis źródłowy · EN

CVSS: 7,5
EPSS: 0,27 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95608

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects HUSKY: from n/a through 1.4.3.2.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95609

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This issue affects Media LIbrary Assistant: from n/a through 3.41.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95610

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects UpSolution Core: from n/a through 9.3.

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,21 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-96329

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue affects tagDiv Opt-In Builder: from n/a through 1.7.6.

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,21 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95591

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through…

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95596

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce…

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95598

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects Search in Place: from n/a through 1.5.5.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95599

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects Taskbuilder: from n/a through 6.0.5.

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,21 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-95607

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a through 4.973.

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,21 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94641

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94661

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a through 2.4.10.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94663

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid: from n/a through 6.0.0.2.

MonitorujOpis źródłowy · EN

CVSS: 8,5
EPSS: 0,21 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94664

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0.

MonitorujOpis źródłowy · EN

CVSS: 7,5
EPSS: 0,36 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94666

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from…

MonitorujOpis źródłowy · EN

CVSS: 7,5
EPSS: 0,36 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94668

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This issue affects Salon booking system: from n/a through 10.31.5.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94166

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution Core: from n/a through 8.44.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94167

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects Kubio AI Page Builder: from n/a through 2.9.3.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94170

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue affects Sassy Social Share: from n/a through 3.3.79.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

CVE-2026-94415

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a through 28.5.8.

MonitorujOpis źródłowy · EN

CVSS: 7,1
EPSS: 0,18 %
Publikacja: 9 paź 2026
Poprawka: Status poprawki nieustalony

Podatności: CVE, produkt, opis, sygnały zagrożenia, CVSS, EPSS i data publikacji.
CVE / produkt	Sygnały	Oceny	Publikacja
CVE-2026-96607 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This issue…	Monitoruj	CVSS 7,1EPSS 0,14 %	9 paź 2026
CVE-2026-96671 Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from URL:…	Monitoruj	CVSS 8,8EPSS 0,13 %	9 paź 2026
CVE-2026-96761 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects Welcart…	Monitoruj	CVSS 7,1EPSS 0,14 %	9 paź 2026
CVE-2026-96332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affects Simple…	Monitoruj	CVSS 7,1EPSS 0,14 %	9 paź 2026
CVE-2026-96333 Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1.	Monitoruj	CVSS 7,5EPSS 0,27 %	9 paź 2026
CVE-2026-96336 Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.	Monitoruj	CVSS 7,5EPSS 0,27 %	9 paź 2026
CVE-2026-95608 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue affects…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-95609 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XSS.This…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-95610 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affects…	Monitoruj	CVSS 8,5EPSS 0,21 %	9 paź 2026
CVE-2026-96329 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This issue…	Monitoruj	CVSS 8,5EPSS 0,21 %	9 paź 2026
CVE-2026-95591 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS.This…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-95596 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-95598 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue affects…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-95599 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affects…	Monitoruj	CVSS 8,5EPSS 0,21 %	9 paź 2026
CVE-2026-95607 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : from n/a…	Monitoruj	CVSS 8,5EPSS 0,21 %	9 paź 2026
CVE-2026-94641 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94661 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: from n/a…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94663 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind…	Monitoruj	CVSS 8,5EPSS 0,21 %	9 paź 2026
CVE-2026-94664 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue…	Monitoruj	CVSS 7,5EPSS 0,36 %	9 paź 2026
CVE-2026-94666 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path…	Monitoruj	CVSS 7,5EPSS 0,36 %	9 paź 2026
CVE-2026-94668 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS.This…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94166 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpSolution…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94167 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affects…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.This issue…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026
CVE-2026-94415 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: from n/a…	Monitoruj	CVSS 7,1EPSS 0,18 %	9 paź 2026

Źródła i pokrycie danych

Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.

Ostatnio zakończone okno publikacji NVD: 8.11.2026, 07:32 UTC – 8.11.2026, 09:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.

NVD · publikacjeOstatnie przetworzenie zakończone8.11.2026, 09:07 UTC

NVD · aktualizacjeOpóźnione lub nieustalone7.11.2026, 20:07 UTC

CISA KEVOstatnie przetworzenie zakończone8.11.2026, 09:15 UTC

FIRST EPSSOstatnie przetworzenie zakończone8.11.2026, 09:07 UTCData modelu znajduje się przy rekordzie.