Vulnerabilidades en UNKNOWN
6367 resultadosCVE-2026-92410MEDIUMSign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRFEPSS 0.1%CVE-2026-97195LOWSecure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field DefinitionEPSS 0.1%CVE-2026-84220MEDIUMKirki < 6.3.2 - Unauthenticated Arbitrary Shortcode Execution via Comments CollectionEPSS 0.1%CVE-2026-118531LOWDirectorist < 8.11.1 - Subscriber+ Listing Moderation Bypass via REST Status UpdateEPSS 0.1%CVE-2025-15611MEDIUMPopup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRFEPSS 0.1%CVE-2026-7850MEDIUMWP Magnific Popup <= 1.0 - Author+ Stored XSS via href AttributeEPSS 0.1%CVE-2026-105256MEDIUMLatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion' ParameterEPSS 0.1%CVE-2026-76549MEDIUMUpdraftPlus < 1.26.7 - Backup Restoration via CSRFEPSS 0.1%CVE-2026-103308MEDIUMVisma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return EndpointEPSS 0.1%CVE-2026-9060LOWAgile Store Locator < 1.6.6 - Admin+ Stored XSS via map_styleEPSS 0.1%CVE-2026-17522MEDIUMNewsletters < 4.17 - Arbitrary Plugin Option Update via CSRFEPSS 0.1%CVE-2026-11866MEDIUMLatePoint < 5.6.3 - Multiple Privileged Actions via CSRFEPSS 0.1%CVE-2026-13156MEDIUMMailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRFEPSS 0.1%CVE-2026-90972MEDIUMWP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data DeletionEPSS 0.1%CVE-2026-118407MEDIUMPremium Packages < 7.3.1 - Subscriber+ Guest Order TakeoverEPSS 0.1%CVE-2026-8981LOWLazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTMLEPSS 0.1%CVE-2026-8151MEDIUMSimple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRFEPSS 0.1%CVE-2026-76792HIGHUser Verification 2.0.38 - 2.0.48 - Unauthenticated Account Takeover via Unthrottled OTP Login VerificationEPSS 0.1%CVE-2026-121498MEDIUMAskany < 2.2.1 - Unauthenticated Chat Session Disclosure and Modification via IDOREPSS 0.1%CVE-2026-124665MEDIUMOrder Tracking < 3.6.2 - Unauthenticated Customer and Sales Rep Order History Disclosure via IDOREPSS 0.1%