Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-xhvc-grwf-wxq3 |
|
The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort par… | 2026-10-21T06:31:16Z | 2026-10-21T06:31:16Z |
| ghsa-x439-gf26-v2wp |
|
The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the in… | 2026-10-21T06:31:16Z | 2026-10-21T06:31:16Z |
| ghsa-rgvg-xc9j-2jxv |
4.3 (3.1)
|
In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages … | 2026-10-21T06:31:16Z | 2026-10-21T06:31:16Z |
| ghsa-q54c-xpfc-w532 |
|
The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any autho… | 2026-10-21T06:31:16Z | 2026-10-21T06:31:16Z |
| ghsa-xwc2-fpw5-v72g |
|
The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its para… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-xm5m-h552-37c3 |
|
The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation cod… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-xm2x-8fhq-8hpv |
9.9 (3.1)
|
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify th… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:16Z |
| ghsa-v5v6-jm3f-74w8 |
|
The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-v5cq-8fvv-9wcc |
|
The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:16Z |
| ghsa-v56r-ggmc-wwxc |
|
The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-r6r9-jfqh-hrq2 |
|
The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment i… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-mr45-fp3c-4768 |
|
The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:16Z |
| ghsa-j3vp-w9x8-7pp7 |
|
The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grant… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-hrxv-m5x6-xfpv |
|
The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-hqf7-665r-7343 |
|
The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:16Z |
| ghsa-h4jv-2hjr-9f5x |
|
The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-grh6-fqc7-f8f5 |
|
The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-fq22-x2c4-x739 |
|
The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-fm6v-w7hr-3xm4 |
|
The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submi… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-f9pm-pfcr-fr64 |
|
The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it ke… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-f3mr-85qm-w65x |
|
The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deletin… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-cwqx-v6j9-jf65 |
|
The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files o… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-cw23-46x9-m6xg |
|
The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous vi… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-92xj-3wcf-999r |
|
The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capabili… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-8mpv-23rw-jfjx |
|
The Wava Payment Plugin WordPress plugin before 0.3.10 does not verify the authenticity of incoming… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:16Z |
| ghsa-84p5-6x2c-h74j |
|
The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only acc… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-7x28-fvqf-5c5h |
|
The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-7phx-x376-59jf |
|
The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-79v7-2xfm-2p77 |
|
The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from reg… | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |
| ghsa-5mcj-pr4f-hvfp |
|
The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability … | 2026-10-21T06:31:15Z | 2026-10-21T06:31:15Z |