|
4321
|
5.3 |
MEDIUM
Network
|
-
|
-
|
The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Improper Neutralization of CRLF Sequences ('CRLF Injection') in all versions up to, and including, 2.…
|
CWE-93
CRLF Injection
|
CVE-2026-2442
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4322
|
5.3 |
MEDIUM
Network
|
-
|
-
|
El Page Builder: Pagelayer – plugin constructor de sitios web de arrastrar y soltar para WordPress es vulnerable a la Neutralización Incorrecta de Secuencias CRLF ('Inyección CRLF') en todas las vers…
|
CWE-93
CRLF Injection
|
CVE-2026-2442
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4323
|
3.5 |
LOW
Adjacent
|
-
|
-
|
Se encontró una vulnerabilidad en wandb OpenUI hasta 1.0/3.5-turb. Afecta a la función generic_exception_handler del archivo backend/openui/server.py del componente Gestor de APIStatusError. La manip…
|
CWE-200 CWE-209
Information Exposure Information Exposure Through an Error Message
|
CVE-2026-4994
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4324
|
3.5 |
LOW
Network
|
-
|
-
|
A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message E…
|
CWE-79 CWE-94
Cross-site Scripting Code Injection
|
CVE-2026-4995
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4325
|
3.5 |
LOW
Network
|
-
|
-
|
Se determinó una vulnerabilidad en wandb OpenUI hasta la versión 1.0. Afectada por esta vulnerabilidad es una funcionalidad desconocida del archivo frontend/public/annotator/index.html del componente…
|
CWE-79 CWE-94
Cross-site Scripting Code Injection
|
CVE-2026-4995
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4326
|
5.4 |
MEDIUM
Network
|
-
|
-
|
The Quads Ads Manager for Google AdSense plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.98.1 due to insufficient input sanitization and output…
|
CWE-79
Cross-site Scripting
|
CVE-2026-2595
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4327
|
5.4 |
MEDIUM
Network
|
-
|
-
|
El plugin Quads Ads Manager para Google AdSense para WordPress es vulnerable a cross-site scripting almacenado en versiones hasta la 2.0.98.1, inclusive, debido a una sanitización de entrada y un esc…
|
CWE-79
Cross-site Scripting
|
CVE-2026-2595
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4328
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_relevant_ques…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4996
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4329
|
7.3 |
HIGH
Network
|
-
|
-
|
Una vulnerabilidad fue identificada en Sinaptik AI PandasAI hasta 0.1.4. Afectada por este problema es la función delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_releva…
|
CWE-74 CWE-89
Injection SQL Injection
|
CVE-2026-4996
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4330
|
5.3 |
MEDIUM
Network
|
-
|
-
|
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0. This affects the function is_sql_query_safe of the file pandasai/helpers/sql_sanitizer.py. Performing a manipulation results i…
|
CWE-22
Path Traversal
|
CVE-2026-4997
|
2026-04-25 01:36 |
2026-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|