آخرین آسیب‌پذیری‌ها
| شناسه | شدت | شرح | EPSS | انتشار |
|---|---|---|---|---|
| CVE-2026-110071 | 6.4متوسط |
Mang Board <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute
kitae-park Mang Board
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-111111 | 7.2بالا |
Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape
bdthemes Prime Slider – Hero Slider
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-111213 | 4.3متوسط |
Travelly <= 2.3.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Duplication via 'post' Parameter
magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerce
|
۰٫۲۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-116610 | 4.3متوسط |
Clean Login <= 1.20.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Clean-Login Option Update via 'save_post' Hook
hornero Clean Login
|
۰٫۱۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-116749 | 6.4متوسط |
VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute
e4jvikwp VikRentCar Car Rental Management System
|
۰٫۱۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-92098 | 6.1متوسط |
Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter
webheadllc Webheadcoder Multi-Step Forms for Contact Form 7
|
۰٫۲۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109980 | 4.3متوسط |
Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter
barrykooij Related Posts for WordPress
|
۰٫۲۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-104729 | 6.4متوسط |
Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tab_index' and 'empty_notice' Shortcode Attributes
ThemeFusion Avada Builder
|
۰٫۱۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-118164 | 6.4متوسط |
If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter
ifso If-So Dynamic Content – Elementor & All Page Builders Personalization
|
۰٫۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-100175 | 5.4متوسط |
Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body URL Autolink
wayneallen-1 Postie
|
۰٫۳۳٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109384 | 8.8بالا |
The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload
melograno The Innovative Form Builder – IvyForms
|
۰٫۷۲٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-77188 | 6.4متوسط |
Waitlist Woocommerce ( Back in stock notifier ) <= 2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'type' Shortcode Attribute
xootix Waitlist Woocommerce
|
۰٫۱۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-110020 | 6.5متوسط |
Rich Showcase for Google Reviews <= 7.1.6 - Missing Authorization to Authenticated (Contributor+) Site Secret Disclosure via 'grw_auth_code' Site Secret Disclosure via grw-builder Admin Page
widgetpack Rich Showcase for Google Reviews
|
۰٫۳۸٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109979 | 4.3متوسط |
Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter
barrykooij Related Posts for WordPress
|
۰٫۲۹٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-111120 | 8.8بالا |
VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
e4jvikwp VikRentCar Car Rental Management System
|
۰٫۳۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-104740 | 6.4متوسط |
If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute
ifso If-So Dynamic Content – Elementor & All Page Builders Personalization
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-111372 | 4.3متوسط |
AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action
QuantumCloud AI ChatBot for WooCommerce – WoowBot
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109978 | 6.4متوسط |
Cozy Blocks <= 2.2.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'productRating.iconColor' Block Attribute
CozyThemes Cozy Blocks – Website Builder & Business Growth Toolkit | Popups
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-76058 | 5.3متوسط |
PayPal Brasil para WooCommerce <= 1.7.8 - Missing Authorization to Unauthenticated Payment Gateway Modification via 'bcdc_activation_update' Action
odefranca PayPal Brasil para WooCommerce
|
۰٫۲۶٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109972 | 6.4متوسط |
s2Member <= 261011 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'date_format' Shortcode Attribute
clavaque s2Member – Excellent for All Kinds of Memberships
|
۰٫۲۷٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-111068 | 4.4متوسط |
DesignSetGo <= 2.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute
Justin Nealey DesignSetGo
|
۰٫۲۱٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109590 | 6.4متوسط |
Travelly <= 2.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width', 'height', and 'zoom' Shortcode Attributes
magepeopleteam Travelly – Tour & Travel Booking Manager for WooCommerce
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-109385 | 6.4متوسط |
UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL
posimyththemes UiChemy – Convert Figma
|
۰٫۲۵٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-103996 | 6.4متوسط |
If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute
ifso If-So Dynamic Content – Elementor & All Page Builders Personalization
|
۰٫۲۴٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|
| CVE-2026-110662 | 7.2بالا |
MxChat <= 3.2.25 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'feedback' Parameter via mxchat_save_rating
mxchat – AI Chatbot & Content Generation for WordPress
|
۰٫۳٪ |
۱۴۰۵/۰۸/۰۶
۷ روز پیش
|