cve.li

Recent

CVE-2026-30247CWE-918

WeKnora: SSRF via Redirection

Published 2026-03-07 by GitHub_M

CVE-2026-3352CWE-94

Easy PHP Settings <= 1.0.4 - Authenticated (Administrator+) PHP Code Injection via 'wp_memory_limit' Setting

Published 2026-03-07 by Wordfence

CVE-2026-2431CWE-79

CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters

Published 2026-03-07 by Wordfence

CVE-2026-2722CWE-79

Stock Ticker <= 3.26.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Template

Published 2026-03-07 by Wordfence

CVE-2026-2721CWE-79

MailArchiver <= 4.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings

Published 2026-03-07 by Wordfence

CVE-2026-1650CWE-862

MDJM Event Management <= 1.7.8.1 - Missing Authorization to Unauthenticated Arbitrary Custom Event Field Deletion

Published 2026-03-07 by Wordfence

CVE-2026-2429CWE-89

Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field

Published 2026-03-07 by Wordfence

CVE-2026-2020CWE-502

JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute

Published 2026-03-07 by Wordfence

CVE-2025-14353CWE-89

ZIP Code Based Content Protection <= 1.0.2 - Unauthenticated SQL Injection via 'zipcode' Parameter

Published 2026-03-07 by Wordfence

CVE-2026-2494CWE-352

ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial

Published 2026-03-07 by Wordfence

Load more ↓