|
1071
|
7.1 |
HIGH
Network
|
-
|
-
|
Unauthenticated Cross Site Scripting (XSS) in weMail <= 2.1.2 versions.
|
CWE-79
Cross-site Scripting
|
CVE-2026-57322
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1072
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Contributor Cross Site Scripting (XSS) in SeedProd Pro < 6.19.5 versions.
|
CWE-79
Cross-site Scripting
|
CVE-2026-57617
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1073
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Unauthenticated Insecure Direct Object References (IDOR) in Blocksy Companion Pro <= 2.1.46 versions.
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-57630
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1074
|
8.5 |
HIGH
Network
|
-
|
-
|
Contributor SQL Injection in wpForo Forum <= 3.0.9 versions.
|
CWE-89
SQL Injection
|
CVE-2026-57636
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1075
|
8.5 |
HIGH
Network
|
-
|
-
|
Contributor SQL Injection in WP Post Author <= 3.9.1 versions.
|
CWE-89
SQL Injection
|
CVE-2026-57643
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1076
|
4.3 |
MEDIUM
Network
|
-
|
-
|
Subscriber Broken Access Control in Shoppable Images Lite <= 1.3 versions.
|
CWE-862
Missing Authorization
|
CVE-2026-57649
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1077
|
8.2 |
HIGH
Network
|
-
|
-
|
Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.
|
CWE-352
Origin Validation Error
|
CVE-2026-57655
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1078
|
5.4 |
MEDIUM
Network
|
-
|
-
|
Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
|
CWE-862
Missing Authorization
|
CVE-2026-57661
|
2026-06-27 00:49 |
2026-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1079
|
8.0 |
HIGH
Network
|
-
|
-
|
Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used …
|
CWE-78
OS Command
|
CVE-2026-40711
|
2026-06-27 00:48 |
2026-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1080
|
6.8 |
MEDIUM
Physics
|
google
|
chrome
|
Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical access to the device. (Chromium security se…
|
CWE-416
Use After Free
|
CVE-2026-13282
|
2026-06-27 00:41 |
2026-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|