Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Published | Updated |
|---|---|---|---|---|
| ghsa-hh26-4vf3-jpr2 |
6.4 (3.1)
|
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scriptin… | 2026-08-02T09:30:25Z | 2026-08-02T09:30:25Z |
| ghsa-m2xx-23gx-734v |
9.1 (3.1)
9.3 (4.0)
|
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unau… | 2026-07-22T15:31:23Z | 2026-08-02T09:30:24Z |
| ghsa-wm3j-jpqg-fwv2 |
6.5 (3.1)
|
A flaw was found in the keycloak-services component of Keycloak, which is used for managing authent… | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-r6f5-hj4x-7mq7 |
5.4 (3.1)
|
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services com… | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-mcjq-c4g7-wcfh |
6.5 (3.1)
|
Keycloak provides authorization services that allow administrators to restrict access to resources … | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-j5pv-734r-xv95 |
|
The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bul… | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-77fq-7qxg-43vp |
|
The ProfileGrid WordPress plugin before 5.9.9.8 does not verify that a notification belongs to the… | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-5vmc-qhfj-qxc3 |
6.6 (3.1)
|
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 … | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-2rf9-6fhx-g6mg |
|
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on… | 2026-08-02T06:30:23Z | 2026-08-02T06:30:23Z |
| ghsa-xqfh-qj3w-mr75 |
|
The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-xh9j-gpmv-5c2v |
|
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deser… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-vrg4-ffx9-cfhg |
|
The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce chec… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-vpwf-36p2-3fwr |
|
The Meta Box WordPress plugin before 5.13.1 does not verify that a user is authorized to delete the… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-cqrw-r722-x7xp |
|
The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-c58x-hvfg-9vjh |
|
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not sanitise or escap… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-9jvp-fc5f-j7qr |
|
The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX act… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-953r-r7wf-54g9 |
|
The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authoriza… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-6h82-r4vw-xr2m |
|
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clea… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-63jw-46hv-gwp2 |
|
The SMS Alert WordPress plugin before 3.9.8 does not bind its "mobile verified" session flag to th… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-5hqh-mj83-f2f6 |
|
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify a… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-5hm3-fq9v-vwj3 |
|
The login-social WordPress plugin through 1.0.4 does not validate password-reset requests against a… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-4v4h-6mhp-rwxf |
|
The Simple Restrict WordPress plugin before 1.2.9 does not enforce its content-restriction permissi… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-465m-pvh5-8rh9 |
|
The Gallery for Google Photos WordPress plugin before 1.2.1 does not properly restrict access to t… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-26m8-g7wc-p86g |
|
The Narrative Publisher WordPress plugin through 1.0.7 does not restrict write access to a REST-exp… | 2026-08-02T06:30:22Z | 2026-08-02T06:30:22Z |
| ghsa-xw6w-vrqp-fhq4 |
|
The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on… | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |
| ghsa-x8v3-6454-g335 |
|
The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid… | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |
| ghsa-rhj3-v77h-x35q |
|
The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check … | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |
| ghsa-mpqf-3vc4-r52m |
|
The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option valu… | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |
| ghsa-jv5v-wg25-69hq |
|
The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it… | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |
| ghsa-g7h4-q4cj-pqfw |
|
## Summary | 2026-08-02T06:30:21Z | 2026-08-02T06:30:21Z |