CVE-2026-62064 — Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
3083Items
1987Last 7 days
81Today
1174Critical + high
13/10/2026 07:36Last collection
CVE-2026-62054 — Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62053 — Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62052 — Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62051 — Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62050 — Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62043 — Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
CVSS 7.5
NVD · CVE récentesCWE-201
CVE-2026-62038 — Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.
CVSS 7.3
NVD · CVE récentesCWE-288
CVE-2026-62037 — Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-62035 — Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
CVSS 6.3
NVD · CVE récentesCWE-862
CVE-2026-62034 — Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.…
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-62033 — Subscriber Settings Change in uListing <= 2.2.0 versions.
Subscriber Settings Change in uListing <= 2.2.0 versions.
CVSS 7.6
NVD · CVE récentesCWE-862