Busca de CVEs
395.535 resultadosCVE-2026-16745HIGHOdh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validationEPSS 0.5%CVE-2026-15015CRITICALMountDev AI MCP Connector for WordPress <= 1.6.1 - Unauthenticated Privilege Escalation via OAuth Authorization EndpointEPSS 0.7%CVE-2026-15394MEDIUMHeader Footer Script Adder <= 2.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'asm_code' Snippet MetaEPSS 0.3%CVE-2026-15448MEDIUMTickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_order_status_filter' ParameterEPSS 0.4%CVE-2026-13119MEDIUMRegistrations for the Events Calendar <= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' ParameterEPSS 0.4%CVE-2026-15786MEDIUMWP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' ParameterEPSS 0.4%CVE-2026-13009MEDIUMAI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' ParameterEPSS 0.5%CVE-2026-15017HIGHMDJM Event Management <= 1.7.8.4 - Authenticated (Subscriber+) Privilege Escalation via 'set-permissions' and 'change_role' HandlersEPSS 0.4%CVE-2026-15348MEDIUMPremium Packages <= 7.0.4 - Authentication Bypass to Non-Admin via 'wpdmppdl' ParameterEPSS 0.6%CVE-2026-65758HIGHJoomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2EPSS 0.3%CVE-2026-65713MEDIUMJoomla Extension - regularlabs.com - Insecure path handling in Modals Pro extensionEPSS 0.2%CVE-2026-64873CRITICALJoomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extensionEPSS 0.3%CVE-2026-64871MEDIUMJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extensionEPSS 0.1%CVE-2026-65757HIGHJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extensionEPSS 0.1%CVE-2026-65755HIGHJoomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extensionEPSS 0.2%CVE-2026-65754HIGHJoomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extensionEPSS 0.3%CVE-2026-64875MEDIUMJoomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extensionEPSS 0.2%CVE-2026-64876HIGHJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extensionEPSS 0.1%CVE-2026-64872MEDIUMJoomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extensionEPSS 0.2%CVE-2026-65712MEDIUMJoomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extensionEPSS 0.1%