Búsqueda de CVEs
402.816 resultadosCVE-2026-103339MEDIUMWordPress Metform plugin <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-102379HIGHWordPress BuildKit – Product Builder for WooCommerce – Custom PC Builder plugin <= 1.0.28 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-103063MEDIUMWordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-103345MEDIUMWordPress Pie Register plugin <= 3.8.4.13 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-103064MEDIUMWordPress ElementsKit Elementor addons Lite plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-102390MEDIUMWordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-102382MEDIUMWordPress Majestic Support plugin <= 1.2.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-102381MEDIUMWordPress Majestic Support plugin <= 1.2.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103343MEDIUMWordPress FluentForm plugin <= 6.2.14 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-103341MEDIUMWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103340MEDIUMWordPress Site Reviews plugin <= 8.3.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-103338HIGHWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-103067HIGHWordPress Memberful - Membership Plugin plugin <= 1.81.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-103754MEDIUMAnsible-runner: ansible-runner: path traversal and symlink escape in unstream_dir() allows file write outside the target directoryEPSS 0.3%CVE-2026-103336MEDIUMWordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-103680LOWTnef: heap buffer overflow in find_free_number() via numbered-backup suffix generationEPSS 0.3%CVE-2026-103679MEDIUMTnef: use-after-free and double-free in get_body_files() via multi-value body extractionEPSS 0.3%CVE-2026-103678MEDIUMTnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi valueEPSS 0.2%CVE-2026-103858MEDIUMMISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to DiscussionsEPSS 0.2%CVE-2026-94276MEDIUMApache APISIX: Openid-connect introspection validation issueEPSS 0.5%