Busca de CVEs
395.538 resultadosCVE-2026-64876HIGHJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extensionEPSS 0.1%CVE-2026-64872MEDIUMJoomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extensionEPSS 0.2%CVE-2026-65712MEDIUMJoomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extensionEPSS 0.1%CVE-2026-65756MEDIUMJoomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extensionEPSS 0.3%CVE-2026-64874CRITICALJoomla Extension - regularlabs.com - CDN Credential leakage Cache Cleaner Pro extensionEPSS 0.3%CVE-2026-64799HIGHJoomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensionsEPSS 0.3%CVE-2026-65430HIGHJoomla Extension - regularlabs.com - MaxMind Credential leakage in GeoIP extensionEPSS 0.2%CVE-2026-65431CRITICALJoomla Extension - regularlabs.com - Zipslip in GeoIP extensionEPSS 0.4%CVE-2026-15011CRITICALCustomer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' ParameterEPSS 0.5%CVE-2026-14282CRITICALGoDAM <= 1.12.2 - Unauthenticated Arbitrary File Upload via WPForms File Upload FieldEPSS 0.7%CVE-2026-15794MEDIUMGrid/List View for WooCommerce <= 3.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'position' Shortcode AttributeEPSS 0.3%CVE-2026-14481MEDIUMEqualize Digital Accessibility Checker <= 1.46.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'html' ParameterEPSS 0.4%CVE-2026-15906MEDIUMPremium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' ParameterEPSS 0.5%CVE-2026-15646MEDIUMBrands for WooCommerce <= 3.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode AttributeEPSS 0.3%CVE-2026-15647MEDIUMBrands for WooCommerce <= 3.8.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta FieldEPSS 0.3%CVE-2026-15761MEDIUMTickera <= 3.6.0.1 - Authenticated (Staff+) SQL Injection via 'tc_event_filter' ParameterEPSS 0.5%CVE-2026-15827MEDIUMGutenKit <= 2.4.12 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Mailchimp REST EndpointsEPSS 0.5%CVE-2026-15404MEDIUMBulk Page Generator <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post TitleEPSS 0.3%CVE-2026-16078MEDIUMWCPOS <= 1.9.8 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read via 'type' ParameterEPSS 0.6%CVE-2026-16723CRITICALRemote Code Execution in fastjson 1.2.68–1.2.83EPSS 16.0%