CVE-2026-54854
6,3 MEDIUM 6,3Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.
Полная база данных уязвимостей CVE. Отслеживайте критические угрозы безопасности, эксплойты и патчи. Обновляется ежедневно.
Contributor Privilege Escalation in Profile Builder <= 4.0.5 versions.
Subscriber Broken Access Control in Booking and Rental Manager <= 2.8.2 versions.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT – Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT – Free …
Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 versions.
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `RADIUS` authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the …
Unauthenticated Cross Site Scripting (XSS) in BA Book Everything <= 1.8.33 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for Elementor - Lite header-footer-elementor allows Stored XSS.This issue affects Ultimate Addons for Elementor …
Unauthenticated PHP Object Injection in FunnelKit Automations <= 3.8.6.1 versions.
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.