Skip to main content
Skip to footer
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-6712: Website LLMs.txt <= 8.2.6 Authenticated (Admin+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-6712 in Website Llms Txt (CVSS 4.4): Website LLMs.txt. Atomic Edge summarizes impact, exploitability, and patch details, with WAF…
CVE-2026-6246: Simple Random Posts Shortcode <= 0.3 Authenticated (Contributor+) Stored Cross-Site Scripting via 'container_right_width' Shortcode Attribute PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-6246 in Simple Random Posts Shortcode (CVSS 6.4): Simple Random Posts Shortcode. Atomic Edge summarizes impact, exploitability, and patch…
CVE-2026-5748: Text Snippets <= 0.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'w' Shortcode Attribute PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-5748 in Text Snippet (CVSS 6.4): Text Snippets. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-6703: Responsive Blocks <= 2.2.1 Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-6703 in Responsive Block Editor Addons (CVSS 4.3): Responsive Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with…
CVE-2026-4118: Call To Action Plugin <= 3.1.3 Cross-Site Request Forgery via Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4118 in Call To Action Plugin (CVSS 4.3): Call To Action Plugin. Atomic Edge summarizes impact, exploitability, and patch…
CVE-2026-4089: Twittee Text Tweet <= 1.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4089 in Twittee Text Tweet (CVSS 6.4): Twittee Text Tweet. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4121: Kcaptcha <= 1.0.1 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4121 in Kcaptcha (CVSS 4.3): Kcaptcha. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
CVE-2026-4279: Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4279 in Bread Butter (CVSS 6.4): Bread & Butter: Content Gating for Verified Leads. Atomic Edge summarizes impact, exploitability,…
CVE-2026-4133: TextP2P Texting Widget <= 1.7 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4133 in Textp2p Texting Widget (CVSS 4.3): TextP2P Texting Widget. Atomic Edge summarizes impact, exploitability, and patch details, with…
CVE-2026-4088: Switch CTA Box <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4088 in Switch Cta Box (CVSS 6.4): Switch CTA Box. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4085: Easy Social Photos Gallery <= 3.1.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper_class' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4085 in My Instagram Feed (CVSS 6.4): Easy Social Photos Gallery. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4076: Slider Bootstrap Carousel <= 1.0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4076 in Slider Bootstrap Carousel (CVSS 6.4): Slider Bootstrap Carousel. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4353: CI HUB Connector <= 1.2.106 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4353 in Ci Hub Connector (CVSS 6.4): CI HUB Connector. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-1923: Social Rocket – Social Sharing Plugin <= 1.3.4.2 Authenticated (Subscriber+) Stored Cross-Site Scripting via id PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1923 in Social Rocket (CVSS 6.4): Social Rocket – Social Sharing Plugin. Atomic Edge summarizes impact, exploitability, and patch…
CVE-2026-3361: WP Store Locator <= 2.2.261 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-3361 in Wp Store Locator (CVSS 6.4): WP Store Locator. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-1913: Gallagher Website Design <= 2.6.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1913 in Gallagher Website Design (CVSS 6.4): Gallagher Website Design. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-1845: Real Estate Pro <= 1.0.9 Authenticated (Admin+) Stored Cross-Site Scripting via Settings PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1845 in Re Pro (CVSS 5.5): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-1930: Emailchef <= 3.5.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1930 in Emailchef (CVSS 4.3): Emailchef. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.5.2.
CVE-2026-1379: HTTP Headers <= 1.19.2 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1379 in Http Headers (CVSS 4.4): HTTP Headers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule…
CVE-2026-2951: Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.5.5 Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-2951 in Gutentor (CVSS 5.4): Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor. Atomic Edge summarizes impact,…
←
1
…
36
37
38
39
40
…
111
→