Vulnerabilidades en UNKNOWN
6349 resultadosCVE-2021-24618—Donate With QRCode < 1.4.5 - Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-17017HIGHCubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relationEPSS 0.4%CVE-2026-18057HIGHEvents Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL InjectionEPSS 0.4%CVE-2026-16539HIGHSM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page DuplicationEPSS 0.4%CVE-2026-88994MEDIUMAll Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block AttributesEPSS 0.4%CVE-2023-6066MEDIUMWP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/UpdateEPSS 0.4%CVE-2026-16977HIGHForm Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_nameEPSS 0.4%CVE-2022-2355MEDIUMEasy Username Updater < 1.0.5 - Arbitrary Username Update via CSRFEPSS 0.4%CVE-2024-0856HIGHBooking Calendar < 1.3.83 - CSRF appointment schedulingEPSS 0.4%CVE-2026-86814HIGHUsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider EmailEPSS 0.4%CVE-2026-18039HIGHEssential Addons for Elementor < 6.7.2 - Unauthenticated Privilege Escalation via Custom Profile Field Mass AssignmentEPSS 0.4%CVE-2026-18468HIGHLogin & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address HeaderEPSS 0.4%CVE-2026-18030HIGHBricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro FormsEPSS 0.4%CVE-2026-82193MEDIUMWPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path TraversalEPSS 0.4%CVE-2026-82183HIGHOAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID AssertionEPSS 0.4%CVE-2026-12281HIGHShibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header SpoofingEPSS 0.4%CVE-2026-12585HIGHAbandoned Cart Lite for WooCommerce < 6.8.2 - Unauthenticated Account Takeover via Malleable Recovery-Link TokenEPSS 0.4%CVE-2026-14300HIGHminiOrange Social Login and Register < 7.8.0 - Unauthenticated Account TakeoverEPSS 0.4%CVE-2024-13678MEDIUMR3W Instafeed <= 1.0 - Reflected XSSEPSS 0.4%CVE-2026-16030HIGHMStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone AuthenticationEPSS 0.4%