Medium-severity CVEs (page 91)
Page 91 of 100 — medium-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65496 | Medium | 4.4 | 2026-07-23 | Author Server Side Request Forgery (SSRF) in Complianz <= 7.5.0 versions. |
CVE-2026-65491 | Medium | 4.3 | 2026-07-23 | Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. |
CVE-2026-65490 | Medium | 5.3 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in John-Michael L'Allier Create mediavine-create allows Retrieve Embed… |
CVE-2026-65489 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions. |
CVE-2026-65487 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Photography <= 7.7.6 versions. |
CVE-2026-65486 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Event post <= 6.0.1 versions. |
CVE-2026-65485 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Content Control <= 2.6.5 versions. |
CVE-2026-65484 | Medium | 6.3 | 2026-07-23 | Contributor Broken Access Control in Style Kits <= 2.6.5 versions. |
CVE-2026-65483 | Medium | 5.9 | 2026-07-23 | Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions. |
CVE-2026-65482 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in LA-Studio Element Kit for Elementor <= 1.6.2 versions. |
CVE-2026-65480 | Medium | 6.5 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affe… |
CVE-2026-65479 | Medium | 5.4 | 2026-07-23 | Subscriber Broken Access Control in Reviewer <= 3.14.2 versions. |
CVE-2026-65478 | Medium | 5.4 | 2026-07-23 | Subscriber Broken Access Control in ListingPro <= 2.9.10 versions. |
CVE-2026-65476 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Civi <= 2.2.4 versions. |
CVE-2026-65475 | Medium | 6.5 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This is… |
CVE-2026-65474 | Medium | 5.3 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions. |
CVE-2026-65473 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions. |
CVE-2026-65472 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions. |
CVE-2026-65470 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions. |
CVE-2026-65469 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions. |
CVE-2026-65468 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. |
CVE-2026-65467 | Medium | 4.9 | 2026-07-23 | Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions. |
CVE-2026-65466 | Medium | 4.9 | 2026-07-23 | Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions. |
CVE-2026-65465 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions. |
CVE-2026-65464 | Medium | 5.4 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions. |
CVE-2026-65463 | Medium | 5.4 | 2026-07-23 | Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions. |
CVE-2026-65460 | Medium | 4.3 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions. |
CVE-2026-65458 | Medium | 4.3 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Se… |
CVE-2026-65457 | Medium | 4.3 | 2026-07-23 | Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions. |
CVE-2026-65456 | Medium | 4.3 | 2026-07-23 | Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions. |
CVE-2026-65453 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. |
CVE-2026-65452 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. |
CVE-2026-65449 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. |
CVE-2026-64810 | Medium | 4.3 | 2026-07-23 | In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity tracking |
CVE-2026-61981 | Medium | 5.4 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions. |
CVE-2026-61973 | Medium | 4.3 | 2026-07-23 | Subscriber Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
CVE-2026-61972 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in ShopLentor Pro <= 2.8.5 versions. |
CVE-2026-61946 | Medium | 6.5 | 2026-07-23 | Unauthenticated Insecure Direct Object References (IDOR) in Easy Appointments <= 3.12.27 versions. |
CVE-2026-61945 | Medium | 6.5 | 2026-07-23 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedd… |
CVE-2026-59524 | Medium | 6.5 | 2026-07-23 | Unauthenticated Broken Authentication in Easy Digital Downloads <= 3.6.7 versions. |
CVE-2026-59522 | Medium | 6.5 | 2026-07-23 | Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. |
CVE-2026-59513 | Medium | 6.5 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions. |
CVE-2026-57808 | Medium | 6.5 | 2026-07-23 | Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. |
CVE-2026-57717 | Medium | 6.5 | 2026-07-23 | Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. |
CVE-2026-57716 | Medium | 5.3 | 2026-07-23 | Unauthenticated Arbitrary File Deletion in Broadcast Live Video <= 7.2.4 versions. |
CVE-2026-57703 | Medium | 6.3 | 2026-07-23 | Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. |
CVE-2026-57425 | Medium | 6.5 | 2026-07-23 | Unauthenticated Broken Access Control in Autopay dla WooCommerce <= 2.2.27 versions. |
CVE-2026-57384 | Medium | 6.5 | 2026-07-23 | Subscriber Cross Site Scripting (XSS) in WishList Member X <= 3.32.0 versions. |
CVE-2026-57373 | Medium | 6.5 | 2026-07-23 | Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions. |
CVE-2026-27423 | Medium | 4.3 | 2026-07-23 | Subscriber Broken Access Control in Participants Database <= 2.7.8.4 versions. |
CVE-2026-27422 | Medium | 5.3 | 2026-07-23 | Missing Authorization vulnerability in bPlugins YT Player yt-player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2026-27418 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. |
CVE-2026-27403 | Medium | 6.5 | 2026-07-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affe… |
CVE-2026-27399 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in MarketKing <= 2.1.40 versions. |
CVE-2026-27392 | Medium | 4.3 | 2026-07-23 | Contributor Broken Access Control in uListing <= 2.2.0 versions. |
CVE-2026-27391 | Medium | 5.4 | 2026-07-23 | Subscriber Broken Access Control in uListing <= 2.2.0 versions. |
CVE-2026-27377 | Medium | 6.7 | 2026-07-23 | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. |
CVE-2026-27372 | Medium | 6.5 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. |
CVE-2026-27355 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions. |
CVE-2026-25466 | Medium | 5.3 | 2026-07-23 | Unauthenticated Broken Access Control in WP Go Maps <= 10.1.04 versions. |
CVE-2026-25427 | Medium | 5.4 | 2026-07-23 | Subscriber Broken Access Control in eRoom <= 1.7.1 versions. |
CVE-2026-25424 | Medium | 4.3 | 2026-07-23 | Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions. |
CVE-2026-24639 | Medium | 4.4 | 2026-07-23 | Author Server Side Request Forgery (SSRF) in Photo Block <= 1.7.1 versions. |
CVE-2026-24628 | Medium | 5.9 | 2026-07-23 | Administrator Cross Site Scripting (XSS) in Photo Gallery by Supsystic <= 1.16.3 versions. |
CVE-2026-24537 | Medium | 4.3 | 2026-07-23 | Unauthenticated Cross Site Request Forgery (CSRF) in WP Accessibility Helper (WAH) <= 0.6.6 versions. |
CVE-2025-68081 | Medium | 5.9 | 2026-07-23 | Administrator Cross Site Scripting (XSS) in WP-Polls <= 2.77.3 versions. |
CVE-2026-65756 | Medium | 6.1 | 2026-07-23 | Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript. |
CVE-2026-65713 | Medium | 6.5 | 2026-07-23 | Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories. |
CVE-2026-65712 | Medium | 6.2 | 2026-07-23 | Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory… |
CVE-2026-64875 | Medium | 6.5 | 2026-07-23 | Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cau… |
CVE-2026-64872 | Medium | 6.5 | 2026-07-23 | Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory. |
CVE-2026-64871 | Medium | 5.4 | 2026-07-23 | Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistent… |
CVE-2026-16078 | Medium | 6.5 | 2026-07-23 | The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.9.8 vi… |
CVE-2026-15906 | Medium | 6.5 | 2026-07-23 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions u… |
CVE-2026-15827 | Medium | 5.3 | 2026-07-23 | The GutenKit Blocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/gutenkit/v1/mailchimp/g… |
CVE-2026-15794 | Medium | 6.4 | 2026-07-23 | The Grid/List View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'position' Shortcode Attribute in all versions up to… |
CVE-2026-15786 | Medium | 4.4 | 2026-07-23 | The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all… |
CVE-2026-15761 | Medium | 6.5 | 2026-07-23 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_event_filter' parameter in all versions up t… |
CVE-2026-15647 | Medium | 4.4 | 2026-07-23 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field in all versions up to, and… |
CVE-2026-15646 | Medium | 6.4 | 2026-07-23 | The Brands for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and includi… |
CVE-2026-15448 | Medium | 6.5 | 2026-07-23 | The Tickera – Sell Tickets & Manage Events plugin for WordPress is vulnerable to generic SQL Injection via the 'tc_order_status_filter' parameter in all versio… |
CVE-2026-15404 | Medium | 6.4 | 2026-07-23 | The Lpagery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.5.7. This is due to insuffici… |
CVE-2026-15394 | Medium | 6.4 | 2026-07-23 | The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'asm_code' Snippet… |
CVE-2026-15348 | Medium | 6.3 | 2026-07-23 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 v… |
CVE-2026-14481 | Medium | 6.4 | 2026-07-23 | The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th… |
CVE-2026-13119 | Medium | 6.5 | 2026-07-23 | The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_rec… |
CVE-2026-13009 | Medium | 6.5 | 2026-07-23 | The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and includi… |
CVE-2026-9729 | Medium | 6.4 | 2026-07-23 | The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'webpushr_notification_title' and 'webpushr_notificat… |
CVE-2026-9635 | Medium | 6.4 | 2026-07-23 | The WP Shortcode by MyThemeShop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the [tab] shortcode in versions… |
CVE-2026-9577 | Medium | 4.8 | 2026-07-23 | The Post Status Notifier Lite WordPress plugin before 1.13.0 does not properly escape the `mod` URL parameter before reflecting it into the admin settings page… |
CVE-2026-9066 | Medium | 6.1 | 2026-07-23 | The WP Compress WordPress plugin before 7.10.04 does not validate the value of a query parameter that controls the asset CDN host before using it to build the… |
CVE-2026-63226 | Medium | 5.8 | 2026-07-23 | Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitra… |
CVE-2026-6390 | Medium | 6.8 | 2026-07-23 | A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specia… |
CVE-2026-7120 | Medium | 5.3 | 2026-07-23 | @fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Vers… |
CVE-2026-21723 | Medium | 5.3 | 2026-07-23 | The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing t… |
CVE-2026-16653 | Medium | 5.3 | 2026-07-23 | A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the file lib/facil/http/http.c of the compo… |
CVE-2026-16631 | Medium | 5.3 | 2026-07-23 | A vulnerability was detected in publint up to 0.1.4. This impacts the function child_process.exec of the file src/node/pack.js of the component package-manager… |
CVE-2026-38763 | Medium | 5.5 | 2026-07-22 | An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828 |
CVE-2026-16630 | Medium | 5.3 | 2026-07-22 | A security vulnerability has been detected in syncfusion ej2-javascript-ui-controls up to 33.2.3. This affects the function child_process.exec of the file pack… |
CVE-2026-16629 | Medium | 5.3 | 2026-07-22 | A vulnerability was identified in danger danger-js up to 13.0.7. Impacted is the function danger.git.diffForFile of the file source/platforms/git/localGetFileA… |