Vulnerabilidades em UNKNOWN
4.258 resultadosCVE-2026-11963HIGHUser Registration & Membership < 5.2.2 - Subscriber+ Cross-User Role and Membership Tier Modification via IDOREPSS 0.1%CVE-2026-12275HIGHTutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki IntegrationEPSS 0.1%CVE-2025-11154MEDIUMIDonate < 2.1.13 - Unauthenticated User DeletionEPSS 0.1%CVE-2026-10530MEDIUMPie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable TokenEPSS 0.1%CVE-2025-9116MEDIUMWPS Visitor Counter Plugin <= 1.4.8 - Reflected XSS via $_SERVER['REQUEST_URI']EPSS 0.1%CVE-2026-1508MEDIUMCourt Reservation < 1.10.9 - Event Deletion via CSRFEPSS 0.1%CVE-2025-12696MEDIUMHelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings ResetEPSS 0.1%CVE-2026-7859MEDIUMMotors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write via stm_ajax_add_a_car_mediaEPSS 0.1%CVE-2025-6790MEDIUMQSM < 10.2.3 - Template Creation via CSRFEPSS 0.1%CVE-2025-10684MEDIUMConstruction Light < 1.6.8 - Subscriber+ Arbitrary Plugin ActivationEPSS 0.1%CVE-2026-9676MEDIUMf4 Post Tree < 2.0.5 - Subscriber+ Arbitrary Post Parent/Menu Order ModificationEPSS 0.1%CVE-2026-1128MEDIUMWP eCommerce <= 3.15.1 - Coupon Deletion via CSRFEPSS 0.1%CVE-2026-11567—SureForms < 2.11.1 - Unauthenticated Payment Amount BypassEPSS —CVE-2026-12988—WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email BindingEPSS —CVE-2026-12511—AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path TraversalEPSS —CVE-2026-11563—Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path TraversalEPSS —CVE-2026-12583—Newsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom FieldEPSS —CVE-2025-15665—BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode FieldEPSS —