|
3091
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO: from n/a through <= 2.0.14.
|
CWE-862
Missing Authorization
|
CVE-2026-25437
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3092
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Vulnerabilidad de autorización faltante en ??? ???????? ????? GZSEO gzseo permite la explotación de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a GZSE…
|
CWE-862
Missing Authorization
|
CVE-2026-25437
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3093
|
9.1 |
CRITICAL
Network
|
-
|
-
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrangler: from n/a throu…
|
CWE-94
Code Injection
|
CVE-2026-25447
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3094
|
9.1 |
CRITICAL
Network
|
-
|
-
|
Vulnerabilidad de control inadecuado de la generación de código ('Inyección de código') en Jonathan Daggerhart Widget Wrangler widget-wrangler permite la inyección de código. Este problema afecta a W…
|
CWE-94
Code Injection
|
CVE-2026-25447
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3095
|
7.1 |
HIGH
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDO Remoji remoji allows Stored XSS.This issue affects Remoji: from n/a through <= 2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2026-25452
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3096
|
7.1 |
HIGH
Network
|
-
|
-
|
Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en WPDO Remoji remoji permite XSS Almacenado. Este problema afecta a Remoji: desde…
|
CWE-79
Cross-site Scripting
|
CVE-2026-25452
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3097
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n/a through <= 4.4.1.
|
CWE-862
Missing Authorization
|
CVE-2026-25454
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3098
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Vulnerabilidad de Autorización Faltante en MVPThemes The League the-league permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a The League: …
|
CWE-862
Missing Authorization
|
CVE-2026-25454
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3099
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
|
CWE-862
Missing Authorization
|
CVE-2026-25455
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3100
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Vulnerabilidad de Autorización Faltante en PickPlugins Product Slider para WooCommerce woocommerce-products-slider permite Explotar Niveles de Seguridad de Control de Acceso Incorrectamente Configura…
|
CWE-862
Missing Authorization
|
CVE-2026-25455
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|