CVE-2026-39722 — Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
1756Éléments
12467 derniers jours
0Aujourd'hui
755Critique + haute
09/10/2026 23:28Dernière collecte
CVE-2026-39720 — Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32577 — Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32575 — Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32574 — Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
Unauthenticated Cross Site Scripting (XSS) in Smart Forms <= 2.6.104 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32572 — Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32571 — Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
CVSS 6.5
NVD · CVE récentesCWE-79
CVE-2026-32570 — Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-32569 — Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-105879 — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocobl…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue affects JetElements For Elementor: fro…
CVSS 6.5
NVD · CVE récentesCWE-79
CVE-2026-105809 — A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects so…
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of th…
CVSS 4.3
CVE-2026-105808 — A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability af…
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can…
CVSS 3.5