CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

9.752 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-39781 Alta · 7.1 CWE-79 06/10/2026
WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through 5.1.1.
CVE-2026-39780 Alta · 7.1 CWE-79 06/10/2026
WordPress Youzify plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions.
CVE-2026-39778 Alta · 7.1 CWE-79 06/10/2026
WordPress Ansar Import – One Click Starter Sites – for Elementor & Themes plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor &amp; Themes <= 2.1.2 versions.
CVE-2026-39766 Alta · 7.1 CWE-79 06/10/2026
WordPress ARForms plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions.
CVE-2026-39758 Alta · 7.1 CWE-79 06/10/2026
WordPress Midtrans-WooCommerce plugin <= 2.32.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions.
CVE-2026-39750 Alta · 7.1 CWE-79 06/10/2026
WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions.
CVE-2026-39748 Alta · 7.1 CWE-79 06/10/2026
WordPress EduMall theme <= 4.5.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions.
CVE-2026-39745 Alta · 7.1 CWE-79 06/10/2026
WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
CVE-2026-39731 Alta · 7.1 CWE-79 06/10/2026
WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions.
CVE-2026-39727 Média · 6.5 CWE-79 06/10/2026
WordPress WC Fields Factory plugin <= 4.1.12 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions.
CVE-2026-39726 Alta · 7.1 CWE-79 06/10/2026
WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions.
CVE-2026-39724 Alta · 7.1 CWE-79 06/10/2026
WordPress HTTP Requests Manager plugin <= 1.3.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions.
CVE-2026-39722 Alta · 7.1 CWE-79 06/10/2026
WordPress WPLMS theme <= 4.972 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
CVE-2026-39720 Alta · 7.1 CWE-79 06/10/2026
WordPress Mapster WP Maps plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
CVE-2026-32577 Alta · 7.1 CWE-79 06/10/2026
WordPress Frontend File Manager plugin <= 23.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
CVE-2026-32575 Alta · 7.1 CWE-79 06/10/2026
WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
CVE-2026-32574 Alta · 7.1 CWE-79 06/10/2026
WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104.
CVE-2026-32572 Alta · 7.1 CWE-79 06/10/2026
WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
CVE-2026-32571 Média · 6.5 CWE-79 06/10/2026
WordPress Ohio Extra plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
CVE-2026-32570 Alta · 7.1 CWE-79 06/10/2026
WordPress Progressify - Progressive Web App (PWA) plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
CVE-2026-32569 Alta · 7.1 CWE-79 06/10/2026
WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVE-2026-105879 Média · 6.5 CWE-79 06/10/2026
WordPress JetElements For Elementor plugin <= 2.9.2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: from n/a through 2.9.2.2.
CVE-2026-105809 Média · 4.3 CWE-79 06/10/2026
SourceCodester Simple Student Information System Profile Field register.php cross site scripting
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
CVE-2026-105808 Baixa · 3.5 CWE-79 06/10/2026
SourceCodester Simple Student Information System searchresults.php clean cross site scripting
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-105061 Alta · 7.1 CWE-79 06/10/2026
WordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.