CVE-2026-118086
8,8 HIGH 8,8Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Полная база данных уязвимостей CVE. Отслеживайте критические угрозы безопасности, эксплойты и патчи. Обновляется ежедневно.
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
Unauthenticated Sensitive Data Exposure in Flexible Chat <= 1.1.0 versions.
Subscriber Cross Site Scripting (XSS) in WP Customer Area <= 8.4.0 versions.
Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog <= 3.6.5 versions.
Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.6 versions.
Unauthenticated Arbitrary Content Deletion in Masteriyo - LMS <= 3.4.3 versions.
Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.