CVE-2026-40803 — Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2408Éléments
16617 derniers jours
6Aujourd'hui
981Critique + haute
12/10/2026 03:32Dernière collecte
CVE-2026-40802 — Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
CVSS 7.6
NVD · CVE récentesCWE-862
CVE-2026-40801 — Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVSS 8.1
NVD · CVE récentesCWE-862
CVE-2026-40800 — Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versio…
Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-40777 — Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
Subscriber Broken Access Control in WPSection <= 1.5.1 versions.
CVSS 8.1
NVD · CVE récentesCWE-862
CVE-2026-39802 — Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions.
CVSS 8.1
NVD · CVE récentesCWE-94
CVE-2026-39801 — Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.
Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.
CVSS 9.8
NVD · CVE récentesCWE-266
CVE-2026-39800 — Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-39799 — Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-27350 — Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forge…
Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta.
CVSS 7.2
NVD · CVE récentesCWE-918
CVE-2026-108604 — Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate t…
Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass read-only mode by submitting side-effecti…
CVSS 6.3
NVD · CVE récentesCWE-863
CVE-2026-108603 — slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows at…
slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influ…
CVSS 3.3
NVD · CVE récentesCWE-22