🚨 EUVD-2026-100789 📊 7.2/10 🏢 danrossiter 📝 The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100789 #cybersecurity #infosec #cve #euvd

🚨 CVE-2026-89310 — CVSS 9.4 CRITICAL A parameter taken from the request body is inserted into a T-SQL statement without parameterization or esca... 🔎 https://stemshop.top/cve/CVE-2026-89310 #CVE #CyberSecurity #InfoSec

🚨 EUVD-2026-100795 📊 7.2/10 🏢 doctorwp 📝 The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100795 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100796 📊 6.4/10 🏢 wpWax 📝 The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Li... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100796 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100801 📊 7.2/10 🏢 ice00 📝 The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100801 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100784 📊 7.5/10 🏢 pasyuk 📝 The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and includi... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100784 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100786 📊 6.4/10 🏢 Foliovision 📝 The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and incl... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100786 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100790 📊 7.2/10 🏢 blackworks1 📝 The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Param... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100790 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100791 📊 6.4/10 🏢 dougwollison 📝 The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including,... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100791 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100792 📊 7.2/10 🏢 avisverifies 📝 The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versio... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100792 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100793 📊 7.5/10 🏢 ntbyk 📝 The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up t... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100793 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100794 📊 7.2/10 🏢 edgarrojas 📝 The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100794 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100797 📊 7.5/10 🏢 10web 📝 The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' para... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100797 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100798 📊 7.2/10 🏢 Foliovision 📝 The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100798 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100799 📊 5.3/10 🏢 ThemeFusion 📝 The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100799 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100800 📊 9.8/10 🏢 ntbyk 📝 The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImag... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100800 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100873 📊 5.3/10 🏢 WisdomGarden 📝 Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific para... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100873 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2022-1454 📊 7.5/10 📝 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1454 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2019-13469 📊 7.5/10 🏢 The libssh2 Project 📝 An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from th... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13469 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2019-13470 📊 7.5/10 🏢 The libssh2 Project 📝 An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt reques... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13470 #cybersecurity #infosec #cve #euvd