Medium-severity CVEs (page 48)
Page 48 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-9626 | Medium | 6.4 | 2026-07-03 | The JSON API User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter of the post_comment API endpoint in versions up… |
CVE-2026-9180 | Medium | 5.3 | 2026-07-03 | The MotoPress Appointment Booking plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to, and including… |
CVE-2026-8892 | Medium | 6.4 | 2026-07-03 | The CM Business Directory – Optimise and showcase local business plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Business Address Meta Fi… |
CVE-2026-8489 | Medium | 6.4 | 2026-07-03 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored… |
CVE-2026-12557 | Medium | 5.3 | 2026-07-03 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.3.29. This is due to the plug… |
CVE-2026-11397 | Medium | 5.5 | 2026-07-03 | The WP Import Export Lite plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to and including 3.9.30 via the wpie_import_uplo… |
CVE-2026-12920 | Medium | 4.9 | 2026-07-03 | The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to… |
CVE-2026-12734 | Medium | 6.4 | 2026-07-03 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'connectorW… |
CVE-2026-12731 | Medium | 6.4 | 2026-07-03 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sectionTit… |
CVE-2026-12729 | Medium | 4.3 | 2026-07-03 | The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to and… |
CVE-2026-55726 | Medium | 5.3 | 2026-07-03 | The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device l… |
CVE-2026-54477 | Medium | 5.4 | 2026-07-03 | The admin panel lacks standard security headers, enabling clickjacking and cross-site scripting attacks. |
CVE-2026-13728 | Medium | 4.4 | 2026-07-03 | In exception circumstances, WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resource… |
CVE-2026-13377 | Medium | 4.8 | 2026-07-03 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS SIP Proxy module allows Sto… |
CVE-2026-13376 | Medium | 4.8 | 2026-07-03 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS spamBlocker module allows S… |
CVE-2026-13375 | Medium | 4.8 | 2026-07-03 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integr… |
CVE-2026-13374 | Medium | 4.8 | 2026-07-03 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Int… |
CVE-2026-13373 | Medium | 4.8 | 2026-07-03 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integr… |
CVE-2026-13371 | Medium | 4.9 | 2026-07-03 | An authenticated administrator can trigger a denial-of-service condition in the Fireware Management Web UI by sending malformed or crafted data to the put_data… |
CVE-2026-26145 | Medium | 4.8 | 2026-07-02 | Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network. |
CVE-2026-52188 | Medium | 6.5 | 2026-07-02 | Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead//sub_497498 compo… |
CVE-2026-59102 | Medium | 5.4 | 2026-07-02 | Forgejo before 15.0.3 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript in other users'… |
CVE-2026-59101 | Medium | 5.8 | 2026-07-02 | AutoBangumi before 3.2.8 contains a server-side request forgery (SSRF) vulnerability that allows unauthenticated remote attackers to probe internal network ser… |
CVE-2026-59100 | Medium | 5.0 | 2026-07-02 | LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to access and modify other users' chat-gr… |
CVE-2026-59098 | Medium | 6.5 | 2026-07-02 | LobeChat through 2.2.9 contains a broken access control vulnerability in the retrieval-augmented-generation semantic search functionality that allows authentic… |
CVE-2026-59097 | Medium | 5.3 | 2026-07-02 | Taiga before 6.10.2 contains a missing authorization vulnerability that allows unauthenticated remote attackers to create default due-date records in any proje… |
CVE-2026-58580 | Medium | 5.9 | 2026-07-02 | LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginSt… |
CVE-2026-58579 | Medium | 5.4 | 2026-07-02 | RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl… |
CVE-2026-58578 | Medium | 6.5 | 2026-07-02 | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows authenticated attackers to block the… |
CVE-2026-58381 | Medium | 6.1 | 2026-07-02 | A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP fi… |
CVE-2025-71385 | Medium | 6.1 | 2026-07-02 | Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG doc… |
CVE-2026-55950 | Medium | 5.9 | 2026-07-02 | Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash… |
CVE-2026-54887 | Medium | 4.8 | 2026-07-02 | Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling s… |
CVE-2026-54886 | Medium | 4.3 | 2026-07-02 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP c… |
CVE-2026-53422 | Medium | 4.3 | 2026-07-02 | Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and di… |
CVE-2026-12166 | Medium | 5.5 | 2026-07-02 | A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted re… |
CVE-2026-58653 | Medium | 4.3 | 2026-07-02 | PraisonAI before 0.1.7 fails to validate that project_id in issue create and update request bodies belongs to the URL workspace. An attacker can create issues… |
CVE-2026-4772 | Medium | 5.4 | 2026-07-02 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This… |
CVE-2026-4770 | Medium | 4.6 | 2026-07-02 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows… |
CVE-2026-57764 | Medium | 6.5 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Surbma | Yoast SEO Breadcrumb Shortcode <= 1.2 versions. |
CVE-2026-57763 | Medium | 6.5 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Structured Content <= 1.7.0 versions. |
CVE-2026-57762 | Medium | 5.9 | 2026-07-02 | Author Cross Site Scripting (XSS) in Simple URLs <= 151 versions. |
CVE-2026-57760 | Medium | 5.3 | 2026-07-02 | Missing Authorization vulnerability in Sendcloud Sendcloud Shipping allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affect… |
CVE-2026-57755 | Medium | 6.5 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Mosaic Gallery – Advanced Gallery <= 1.2.0 versions. |
CVE-2026-57754 | Medium | 6.5 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in Livemesh Addons for WPBakery Page Builder <= 3.9.4 versions. |
CVE-2026-57753 | Medium | 5.3 | 2026-07-02 | Unauthenticated Sensitive Data Exposure in Kit (formerly ConvertKit) for WooCommerce <= 2.1.5 versions. |
CVE-2026-57750 | Medium | 5.3 | 2026-07-02 | Unauthenticated Broken Access Control in ez Form Calculator Premium <= 2.14.1.2 versions. |
CVE-2026-57747 | Medium | 6.5 | 2026-07-02 | Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions. |
CVE-2026-57731 | Medium | 6.5 | 2026-07-02 | Contributor Broken Access Control in Flatsome <= 3.20.5 versions. |
CVE-2026-57730 | Medium | 4.3 | 2026-07-02 | Subscriber Broken Access Control in Flatsome <= 3.20.5 versions. |
CVE-2026-57690 | Medium | 4.3 | 2026-07-02 | Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions. |
CVE-2026-57689 | Medium | 4.3 | 2026-07-02 | Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions. |
CVE-2026-57685 | Medium | 4.3 | 2026-07-02 | Subscriber Broken Access Control in Martfury - WooCommerce Marketplace WordPress Theme <= 3.2.8 versions. |
CVE-2026-57684 | Medium | 6.5 | 2026-07-02 | Contributor Cross Site Scripting (XSS) in TheFox <= 3.9.70 versions. |
CVE-2026-57681 | Medium | 6.4 | 2026-07-02 | Subscriber Server Side Request Forgery (SSRF) in GeoDirectory <= 2.8.161 versions. |
CVE-2026-57680 | Medium | 6.5 | 2026-07-02 | Unauthenticated Insecure Direct Object References (IDOR) in Kirki <= 6.0.11 versions. |
CVE-2026-57669 | Medium | 6.5 | 2026-07-02 | Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions. |
CVE-2026-57355 | Medium | 6.5 | 2026-07-02 | Subscriber Broken Access Control in Classified Listing <= 5.4.2 versions. |
CVE-2026-57354 | Medium | 6.5 | 2026-07-02 | Subscriber Cross Site Scripting (XSS) in JetReviews <= 3.0.0.1 versions. |
CVE-2026-57353 | Medium | 6.5 | 2026-07-02 | Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions. |
CVE-2026-57352 | Medium | 4.8 | 2026-07-02 | Unauthenticated Broken Authentication in ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce <= 2.2.0 versions. |
CVE-2026-57347 | Medium | 6.5 | 2026-07-02 | Subscriber Sensitive Data Exposure in Hotel Booking Lite <= 6.0.3 versions. |
CVE-2026-57342 | Medium | 6.5 | 2026-07-02 | Subscriber Cross Site Scripting (XSS) in ShortPixel Adaptive Images <= 3.11.3 versions. |
CVE-2026-49779 | Medium | 6.5 | 2026-07-02 | Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a… |
CVE-2026-27433 | Medium | 6.5 | 2026-07-02 | Unauthenticated Broken Access Control in Motors <= 5.6.80 versions. |
CVE-2025-69132 | Medium | 6.5 | 2026-07-02 | Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. |
CVE-2025-66076 | Medium | 5.3 | 2026-07-02 | Unauthenticated Broken Access Control in Woostify Sites Library <= 1.6.2 versions. |
CVE-2026-9188 | Medium | 5.3 | 2026-07-02 | The Appointment Bookings for Zoom GoogleMeet and more – Wappointment plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up… |
CVE-2026-9145 | Medium | 6.5 | 2026-07-02 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Arbitrary File Copy via the create_entry_el() function in versi… |
CVE-2026-8482 | Medium | 4.3 | 2026-07-02 | A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a p… |
CVE-2026-14029 | Medium | 6.5 | 2026-07-02 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to generic SQL Injection via the 'select' parameter in all versi… |
CVE-2026-13459 | Medium | 5.3 | 2026-07-02 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3. This i… |
CVE-2026-13252 | Medium | 6.4 | 2026-07-02 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Script… |
CVE-2026-12657 | Medium | 5.3 | 2026-07-02 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up t… |
CVE-2026-12472 | Medium | 5.3 | 2026-07-02 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including… |
CVE-2026-12134 | Medium | 4.3 | 2026-07-02 | The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to authorization bypass in all versions up to, and includ… |
CVE-2026-12122 | Medium | 5.3 | 2026-07-02 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and… |
CVE-2026-11896 | Medium | 5.3 | 2026-07-02 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.14… |
CVE-2026-10104 | Medium | 4.4 | 2026-07-02 | The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom_thumbnail Parameter in all versions up t… |
CVE-2026-5348 | Medium | 5.3 | 2026-07-02 | The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to… |
CVE-2026-13704 | Medium | 6.4 | 2026-07-02 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sequoia[introduction][image]'… |
CVE-2026-13357 | Medium | 4.9 | 2026-07-02 | The Houzez Property Feed plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 2.5.46 due to in… |
CVE-2026-11965 | Medium | 6.5 | 2026-07-02 | The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowin… |
CVE-2026-11600 | Medium | 4.3 | 2026-07-02 | The Envo's Templates & Widgets for Elementor and WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing authorization c… |
CVE-2026-11592 | Medium | 4.3 | 2026-07-02 | The Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress plugin for WordPress is vulnerable to authorization… |
CVE-2026-10089 | Medium | 6.4 | 2026-07-02 | The Insert Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post custom field keys (meta key names) in all versions up to, and inclu… |
CVE-2026-10077 | Medium | 6.8 | 2026-07-02 | The yootheme WordPress theme before 5.0.35 does not prevent its bundled front-end framework from treating certain HTML attributes, which are permitted by wp_ks… |
CVE-2026-14440 | Medium | 6.8 | 2026-07-01 | Description: To issue and renew TLS certificates on behalf of customers, Cloudflare's Universal SSL feature automatically manages the CAA RRset for the cus… |
CVE-2026-14421 | Medium | 6.5 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome on ChromeOS prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from proces… |
CVE-2026-14418 | Medium | 4.3 | 2026-07-01 | Uninitialized Use in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur… |
CVE-2026-14414 | Medium | 5.3 | 2026-07-01 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process t… |
CVE-2026-14410 | Medium | 4.3 | 2026-07-01 | Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI s… |
CVE-2026-14408 | Medium | 6.5 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via… |
CVE-2026-14406 | Medium | 5.9 | 2026-07-01 | Out of bounds read in V8 in Google Chrome prior to 150.0.7871.46 allowed an attacker who convinced a user to install a malicious extension to obtain potentiall… |
CVE-2026-14404 | Medium | 6.5 | 2026-07-01 | Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromi… |
CVE-2026-14402 | Medium | 6.5 | 2026-07-01 | Uninitialized Use in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from proces… |
CVE-2026-14399 | Medium | 6.5 | 2026-07-01 | Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via… |
CVE-2026-14396 | Medium | 6.5 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu… |
CVE-2026-14391 | Medium | 5.3 | 2026-07-01 | Integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain poten… |
CVE-2026-14388 | Medium | 6.5 | 2026-07-01 | Out of bounds read in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory v… |