Busca de CVEs
375.176 resultadosCVE-2026-27407HIGHWordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2026-27333HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerabilityEPSS 0.3%CVE-2026-27089HIGHWordPress WpTravelly plugin <= 2.1.7 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-27053CRITICALWordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-25440MEDIUMWordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25425HIGHWordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-24637HIGHWordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-23970HIGHWordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-9691CRITICALWordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-69332MEDIUMWordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-68872HIGHWordPress Eli's WordCents adSense Widget with Analytics plugin <= 1.3.03.27 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68851HIGHWordPress Okay Toolkit plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68840HIGHWordPress iRobots.txt SEO plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68049MEDIUMWordPress bunny.net plugin <= 2.3.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-60175MEDIUMWordPress PopAd Plugin <= 1.0.4 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2025-59133HIGHWordPress Projectopia plugin <= 5.1.25.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-48709LOWOliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument EnumerationEPSS 0.3%CVE-2026-48708HIGHOliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command ContaminationEPSS 0.4%CVE-2026-48124HIGHCursor Desktop sandbox escape via Claude hook configurationEPSS 0.1%CVE-2026-47261HIGHWasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restrictionEPSS 0.4%