📝

CMS / Site Builder

slug: cms

🛡 Vulnérabilités associées 76

ID	Titre	Gravité	Détecté
CVE-2026-66473	Vulnérabilité dans Xendit Payment (CVE-2026-66473)	High	il y a 2 mois
CVE-2026-61953	SSRF (Falsification de requête côté serveur) dans Simple Link Directory Pro (CVE-2026-61953)	High	il y a 2 mois
CVE-2026-65437	XSS (Cross-Site Scripting) dans WordPress (CVE-2026-65437)	High	il y a 2 mois
CVE-2026-63030 KEV	[KEV] Vulnérabilité dans WordPress Core (CVE-2026-63030)	Critical	il y a 2 mois
CVE-2026-58054	Élévation de privilèges dans MyBB (CVE-2026-58054)	High	il y a 3 mois
CVE-2026-3652	XSS (Cross-Site Scripting) dans ARForms (WordPress plugin) (CVE-2026-3652)	High	il y a 3 mois
CVE-2026-46489	XSS (Cross-Site Scripting) dans SolidInvoice (CVE-2026-46489)	High	il y a 4 mois
CVE-2026-5415	Vulnérabilité dans WordPress (CVE-2026-5415)	High	il y a 4 mois
CVE-2026-5411	Téléversement de fichier dangereux dans WordPress (CVE-2026-5411)	High	il y a 4 mois
CVE-2026-46392	HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0 of HAX CMS PHP, the…	High	il y a 4 mois
CVE-2026-1829	The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code...	High	il y a 4 mois
CVE-2026-39555	Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. ...	High	il y a 4 mois
CVE-2026-39553	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	il y a 4 mois
CVE-2026-39552	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	il y a 4 mois
CVE-2025-68886	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	il y a 4 mois
CVE-2025-69369	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...	High	il y a 4 mois
CVE-2025-11262	The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the...	High	il y a 4 mois
CVE-2026-42760	Authentication Bypass Using an Alternate Path or Channel vulnerability in revmakx Backup and...	High	il y a 4 mois
CVE-2026-42762	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...	High	il y a 4 mois
CVE-2026-42753	Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows...	High	il y a 4 mois
CVE-2026-42737	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...	High	il y a 4 mois
CVE-2026-42735	Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare...	High	il y a 4 mois
CVE-2026-42736	Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp...	High	il y a 4 mois
CVE-2026-42745	Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online...	High	il y a 4 mois
CVE-2026-42730	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...	High	il y a 4 mois
CVE-2026-46408	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the checkout endpoint accepts a user-controlled cart_id and uses it to enter t...	High	il y a 5 mois
CVE-2026-46367	Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering	High	il y a 5 mois
CVE-2026-46407	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the backend admin/auth-token endpoint allows an authenticated administrator to...	High	il y a 5 mois
CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	il y a 5 mois
CVE-2026-46366	phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query	High	il y a 5 mois