🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-3445 | مرتفع | 7.1 |
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres…
|
— | أبريل 4, 2026 |
| CVE-2026-3571 | متوسط | 6.5 |
The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized …
|
— | أبريل 4, 2026 |
| CVE-2026-3309 | متوسط | 6.5 |
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePres…
|
— | أبريل 4, 2026 |
| CVE-2025-15064 | متوسط | 6.4 |
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi…
|
— | أبريل 4, 2026 |
| CVE-2026-2924 | متوسط | 6.4 |
The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Stored Cross-Sit…
|
— | أبريل 4, 2026 |
| CVE-2025-13368 | متوسط | 6.4 |
The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the P…
|
— | أبريل 4, 2026 |
| CVE-2026-0552 | متوسط | 6.4 |
The Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsc_displa…
|
— | أبريل 4, 2026 |
| CVE-2018-25249 | متوسط | 6.4 |
MyBB My Arcade Plugin 1.3 contains a persistent cross-site scripting vulnerability that allows authenticated users to in…
|
— | أبريل 4, 2026 |
| CVE-2026-0626 | متوسط | 6.4 |
The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulner…
|
— | أبريل 4, 2026 |
| CVE-2026-0664 | متوسط | 6.4 |
The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'button_text' p…
|
— | أبريل 4, 2026 |
| CVE-2026-0738 | متوسط | 6.4 |
The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
— | أبريل 4, 2026 |
| CVE-2026-2600 | متوسط | 6.4 |
The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
— | أبريل 4, 2026 |
| CVE-2026-0737 | متوسط | 6.4 |
The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all …
|
— | أبريل 4, 2026 |
| CVE-2026-2949 | متوسط | 6.4 |
The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the I…
|
— | أبريل 4, 2026 |
| CVE-2026-2437 | متوسط | 6.4 |
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Stored Cross-S…
|
— | أبريل 4, 2026 |
| CVE-2016-20050 | متوسط | 6.2 |
NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to c…
|
— | أبريل 4, 2026 |
| CVE-2018-25252 | متوسط | 6.2 |
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by in…
|
— | أبريل 4, 2026 |
| CVE-2018-25253 | متوسط | 6.2 |
Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local att…
|
— | أبريل 4, 2026 |
| CVE-2018-25247 | متوسط | 6.1 |
MyBB Like Plugin 3.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts b…
|
— | أبريل 4, 2026 |
| CVE-2016-20051 | متوسط | 5.3 |
Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credenti…
|
— | أبريل 4, 2026 |