Vulnerabilidades de Mamunur Rashid

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mamunur Rashid: 9 registro(s), com severidade, exploração e correções.

Classified Listing 6 ShopBuilder – Elementor WooCommerce Builder Addons 1 The Post Grid 1 Review Schema 1

Somente exploradas (KEV) →

CVE-2026-95596 Alta · 7.1 CWE-79 09/10/2026

WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Reflected XSS.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through 3.4.1.

CVE-2026-94665 Média · 6.5 CWE-79 09/10/2026

WordPress Classified Listing plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2.

CVE-2026-97280 Média · 6.5 CWE-862 01/10/2026

WordPress Review Schema plugin 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0.

CVE-2026-84217 Média · 5.4 CWE-862 02/09/2026

WordPress Classified Listing plugin <= 6.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.3.

CVE-2026-42658 Alta · 7.1 CWE-79 15/06/2026

WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions.

CVE-2026-42651 Média · 6.3 CWE-862 15/06/2026

WordPress Classified Listing plugin <= 5.3.9 - Broken Access Control vulnerability

Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions.

CVE-2026-42640 Média · 6.5 CWE-862 15/06/2026

WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions.

CVE-2026-42679 Média · 6.5 CWE-22 01/06/2026

WordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n/a through 5.3.8.

CVE-2026-49054 Média · 4.3 CWE-862 27/05/2026

WordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2.