📝

CMS / Site Builder

slug: cms

🛡 Vulnérabilités associées 76

ID	Titre	Gravité	Détecté
CVE-2026-44826	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.2, Vvveb CMS does not validate the sign of the quantity parameter on the cart-add...	High	il y a 5 mois
CVE-2021-47964	Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...	High	il y a 5 mois
CVE-2021-47959	WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows...	High	il y a 5 mois
CVE-2026-4094	The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to...	High	il y a 5 mois
CVE-2026-41902	Vulnérabilité dans laravel (CVE-2026-41902)	Critical	il y a 5 mois
CVE-2026-36458	Injection de code dans sqli (CVE-2026-36458)	Critical	il y a 5 mois
CVE-2025-14868	The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6. This is due to miss...	High	il y a 6 mois
CVE-2026-4326	The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4. This is due to improper authorization enforcement in the activate...	High	il y a 6 mois
CVE-2026-3243	The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1....	High	il y a 6 mois
CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	il y a 6 mois
CVE-2026-3445	The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unauthorized membership payment bypass i...	High	il y a 6 mois
CVE-2026-4896	The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclu...	High	il y a 6 mois
CVE-2026-4350	The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the `PMCS::action_handler()` method proce...	High	il y a 6 mois
CVE-2025-12821	The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 0.2.5...	High	il y a 7 mois
CVE-2025-0610	Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request...	High	il y a 1 an
CVE-2021-41164	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	High	il y a 4 ans