Common Vulnerabilities and Exposures (CVE)
CVE-2026-104747
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
CVE-2026-104757
Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
CVE-2026-104814
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
CVE-2026-105057
Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
CVE-2026-105058
Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
CVE-2026-105059
Subscriber Broken Access Control in Delete All Comments of wordpress <= 7.1 versions.
CVE-2026-105061
Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.
CVE-2026-105070
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
CVE-2026-105071
Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions.
CVE-2026-105317
Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions.
CVE-2026-104399
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124.
CVE-2026-15588
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated ...
CVE-2026-59668
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affecte...
CVE-2026-59667
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomTamano” parameter is affecte...
CVE-2026-59666
Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomOrigen” parameter is affecte...