Stored Cross-Site Scripting in ITERAS Plugin
Overview of CVE-2026-4078 A stored Cross-Site Scripting vulnerability affects the ITERAS plugin. This flaw has a CVSS score…
Category
Security
Royal Elementor Addons CSRF Vulnerability
Attackers can trick admins into changing plugin settings in Royal Elementor Addons. This CSRF flaw lets attackers perform…
Stored XSS in WP Store Locator Plugin
A stored cross-site scripting vulnerability affects WP Store Locator. This WordPress plugin helps businesses display store locations. CVE-2026-3361…
Stored Cross-Site Scripting in Liaison Site Prober Plugin
Overview of CVE-2026-3569 A stored Cross-Site Scripting vulnerability affects Liaison Site Prober. This flaw has a CVSS score…
HM Books Gallery Missing Authorization Vulnerability
Users can bypass access controls in HM Books Gallery. This missing authorization flaw affects book management features. It…
Critical Arbitrary File Upload in Breeze Cache Plugin
A critical vulnerability hits Breeze Cache, a WordPress caching plugin. CVE-2026-3844 carries a CVSS score of 9.8. This…
Cross-Site Request Forgery in Taqnix Plugin
Overview of CVE-2026-3565 A Cross-Site Request Forgery vulnerability affects the Taqnix plugin. This flaw has a CVSS score…
BetterDocs Missing Authorization Vulnerability
Users can access restricted documentation features in BetterDocs. This missing authorization flaw affects data privacy. It exposes sensitive…
ExactMetrics Missing Authorization Vulnerability
Authenticated users can access unauthorized features in ExactMetrics. This flaw exposes your analytics data. It may allow privilege…
Stored XSS in Gutentor WordPress Plugin
Security researchers found a stored cross-site scripting (XSS) flaw in Gutentor. This WordPress page builder plugin has over…