CVE-2026-42693 — Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2512Éléments
16657 derniers jours
110Aujourd'hui
996Critique + haute
12/10/2026 11:33Dernière collecte
CVE-2026-42633 — Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-42632 — Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42631 — Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42630 — Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
CVSS 7.5
NVD · CVE récentesCWE-201
CVE-2026-42419 — Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
CVSS 5.9
NVD · CVE récentesCWE-201
CVE-2026-40808 — Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
CVSS 6.5
NVD · CVE récentesCWE-862
CVE-2026-40805 — Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions.
CVSS 7.7
NVD · CVE récentesCWE-22
CVE-2026-40803 — Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-40802 — Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions.
CVSS 7.6
NVD · CVE récentesCWE-862
CVE-2026-40801 — Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
Subscriber Broken Access Control in Wordable <= 8.2.10 versions.
CVSS 8.1
NVD · CVE récentesCWE-862
CVE-2026-40800 — Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versio…
Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions.
CVSS 9.3
NVD · CVE récentesCWE-89