CVE-2026-62037 — Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2512Éléments
16927 derniers jours
110Aujourd'hui
996Critique + haute
12/10/2026 11:33Dernière collecte
CVE-2026-62035 — Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions.
CVSS 6.3
NVD · CVE récentesCWE-862
CVE-2026-62034 — Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.…
Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-62033 — Subscriber Settings Change in uListing <= 2.2.0 versions.
Subscriber Settings Change in uListing <= 2.2.0 versions.
CVSS 7.6
NVD · CVE récentesCWE-862
CVE-2026-62032 — Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
CVSS 9.8
NVD · CVE récentesCWE-98
CVE-2026-62031 — Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
CVSS 9.3
NVD · CVE récentesCWE-89
CVE-2026-62030 — Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
CVSS 7.2
NVD · CVE récentesCWE-918
CVE-2026-62027 — Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-62025 — Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.
Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.
CVSS 9
NVD · CVE récentesCWE-434
CVE-2026-62024 — Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
CVSS 9.9
NVD · CVE récentesCWE-434
CVE-2026-62022 — Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-266
CVE-2026-62021 — Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVSS 8.8
NVD · CVE récentesCWE-502