CVE-2026-42702 — Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2408Éléments
16657 derniers jours
6Aujourd'hui
981Critique + haute
12/10/2026 03:32Dernière collecte
CVE-2026-42699 — Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42697 — Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42696 — Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 ver…
Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.
CVSS 10
NVD · CVE récentesCWE-94
CVE-2026-42693 — Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42633 — Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-42632 — Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42631 — Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42630 — Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
CVSS 7.5
NVD · CVE récentesCWE-201
CVE-2026-42419 — Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
CVSS 5.9
NVD · CVE récentesCWE-201
CVE-2026-40808 — Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVSS 6.5
NVD · CVE récentesCWE-862
CVE-2026-40805 — Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
CVSS 7.7
NVD · CVE récentesCWE-22