CVE-2026-104814
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,23 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
KATALOG PODATNOŚCI
Baza CVE
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
CVE-2026-104387
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,2
- EPSS
- 0,32 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-104394
Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,23 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-104395
Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,23 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-102387
Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,3 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-102915
Subscriber Broken Access Control in WPO365 <= 44.1 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 8,5
- EPSS
- 0,22 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-103346
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This issue affects Payflex Payment Gateway: from n/a through 2.7.1.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-104385
Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,3 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
- CVSS
- 7,8
- EPSS
- 0,07 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-59358
Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain a fully-privileged client_credentials token for the OAuth client that issued it, by…
MonitorujOpis źródłowy · EN
- CVSS
- 7,6
- EPSS
- 0,41 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-25302
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,06 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-57537
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,07 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-57545
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,08 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,17 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,07 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,07 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-25291
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,07 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-105701
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig…
MonitorujOpis źródłowy · EN
- CVSS
- 8,8
- EPSS
- 0,53 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-105778
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It…
MonitorujOpis źródłowy · EN
- CVSS
- 8,6
- EPSS
- 0,48 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-25267
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
MonitorujOpis źródłowy · EN
- CVSS
- 7,8
- EPSS
- 0,06 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-39760
Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,1
- EPSS
- 0,14 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-39789
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,2 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-41558
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,26 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-41563
Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.
MonitorujOpis źródłowy · EN
- CVSS
- 7,5
- EPSS
- 0,25 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
CVE-2026-75962
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, and including, 4.0.1 due…
MonitorujOpis źródłowy · EN
- CVSS
- 7,2
- EPSS
- 0,28 %
- Publikacja
- Poprawka
- Status poprawki nieustalony
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-104814 Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-104387 Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. |
Monitoruj |
CVSS 7,2EPSS 0,32 % | ||
| CVE-2026-104394 Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-104395 Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions. |
Monitoruj |
CVSS 7,1EPSS 0,23 % | ||
| CVE-2026-102387 Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-102915 Subscriber Broken Access Control in WPO365 <= 44.1 versions. |
Monitoruj |
CVSS 8,5EPSS 0,22 % | ||
| CVE-2026-103346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS.This… |
Monitoruj |
CVSS 7,1EPSS 0,14 % | ||
| CVE-2026-104385 Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. |
Monitoruj |
CVSS 7,5EPSS 0,3 % | ||
| CVE-2026-57559 Memory corruption while processing service requests. |
Monitoruj |
CVSS 7,8EPSS 0,07 % | ||
| CVE-2026-59358 Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain a fully-privileged… |
Monitoruj |
CVSS 7,6EPSS 0,41 % | ||
| CVE-2026-25302 Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. |
Monitoruj |
CVSS 7,1EPSS 0,06 % | ||
| CVE-2026-57537 Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. |
Monitoruj |
CVSS 7,8EPSS 0,07 % | ||
| CVE-2026-57545 Memory corruption when processing draw objects of incorrect type during graphics command list execution. |
Monitoruj |
CVSS 7,8EPSS 0,08 % | ||
| CVE-2026-57546 Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
Monitoruj |
CVSS 7,5EPSS 0,17 % | ||
| CVE-2026-57554 Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. |
Monitoruj |
CVSS 7,8EPSS 0,07 % | ||
| CVE-2026-57555 Memory Corruption when executing system service routines due to improper handling of user input buffers. |
Monitoruj |
CVSS 7,8EPSS 0,07 % | ||
| CVE-2026-25291 Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. |
Monitoruj |
CVSS 7,8EPSS 0,07 % | ||
| CVE-2026-105701 The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check… |
Monitoruj |
CVSS 8,8EPSS 0,53 % | ||
| CVE-2026-105778 A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such… |
Monitoruj |
CVSS 8,6EPSS 0,48 % | ||
| CVE-2026-25267 Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
Monitoruj |
CVSS 7,8EPSS 0,06 % | ||
| CVE-2026-39760 Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions. |
Monitoruj |
CVSS 7,1EPSS 0,14 % | ||
| CVE-2026-39789 Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. |
Monitoruj |
CVSS 7,5EPSS 0,2 % | ||
| CVE-2026-41558 Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions. |
Monitoruj |
CVSS 7,5EPSS 0,26 % | ||
| CVE-2026-41563 Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions. |
Monitoruj |
CVSS 7,5EPSS 0,25 % | ||
| CVE-2026-75962 The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
Monitoruj |
CVSS 7,2EPSS 0,28 % |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 11.11.2026, 07:32 UTC – 11.11.2026, 09:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.
NVD · publikacjeOstatnie przetworzenie zakończone
NVD · aktualizacjeOpóźnione lub nieustalone
CISA KEVOstatnie przetworzenie zakończone
FIRST EPSSOstatnie przetworzenie zakończoneData modelu znajduje się przy rekordzie.