CVE-2026-42716 — Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2512Éléments
16767 derniers jours
110Aujourd'hui
996Critique + haute
12/10/2026 11:33Dernière collecte
CVE-2026-42715 — Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42712 — Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-42711 — Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42709 — Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <…
Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42706 — Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-42705 — Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-42704 — Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-42702 — Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
Unauthenticated Cross Site Scripting (XSS) in Tutor LMS <= 4.1.0 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42699 — Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42697 — Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Social Share Icons & Social Share Buttons <= 3.7.5 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42696 — Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 ver…
Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.19 versions.
CVSS 10
NVD · CVE récentesCWE-94