|
4391
|
8.8 |
HIGH
Network
|
-
|
-
|
Vulnerabilidad de deserialización de datos no confiables en BoldGrid weForms weforms permite la inyección de objetos. Este problema afecta a weForms: desde n/a hasta <= 1.6.26.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-32484
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4392
|
7.5 |
HIGH
Network
|
-
|
-
|
Missing Authorization vulnerability in weDevs WP User Frontend wp-user-frontend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Frontend: from n/a t…
|
CWE-862
Missing Authorization
|
CVE-2026-32485
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4393
|
7.5 |
HIGH
Network
|
-
|
-
|
Vulnerabilidad por ausencia de autorización en weDevs WP User Frontend wp-user-frontend permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a…
|
CWE-862
Missing Authorization
|
CVE-2026-32485
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4394
|
8.1 |
HIGH
Network
|
-
|
-
|
Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= 4.4.9.
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2026-32488
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4395
|
8.1 |
HIGH
Network
|
-
|
-
|
Vulnerabilidad de Asignación Incorrecta de Privilegios en wpeverest User Registration user-registration permite la escalada de privilegios. Este problema afecta a User Registration: desde n/a hasta &…
|
CWE-266
Incorrect Privilege Assignment
|
CVE-2026-32488
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4396
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks: from n/a through < 2.0.30.
|
CWE-862
Missing Authorization
|
CVE-2026-32489
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4397
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Vulnerabilidad de Autorización Faltante en bPlugins B Blocks b-blocks permite la Explotación de Niveles de Seguridad de Control de Acceso Incorrectamente Configurados. Este problema afecta a B Blocks…
|
CWE-862
Missing Authorization
|
CVE-2026-32489
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4398
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP TripAdvisor Review Slider wp-tripadvisor-review-slider allows Stored XSS.This issue …
|
CWE-79
Cross-site Scripting
|
CVE-2026-32490
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4399
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Neutralización Incorrecta de la Entrada Durante la Generación de Páginas Web ('cross-site scripting') vulnerabilidad en jgwhite33 WP TripAdvisor Review Slider wp-tripadvisor-review-slider permite XSS…
|
CWE-79
Cross-site Scripting
|
CVE-2026-32490
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4400
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgwhite33 WP Review Slider wp-facebook-reviews allows Stored XSS.This issue affects WP Review Sli…
|
CWE-79
Cross-site Scripting
|
CVE-2026-32491
|
2026-04-25 01:35 |
2026-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|