Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-5748: Text Snippets <= 0.0.1 Authenticated (Contributor+) Stored Cross-Site Scripting via 'w' Shortcode Attribute PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-5748 in Text Snippet (CVSS 6.4): Text Snippets. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2024-7083: Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 Authenticated (Administrator+) Stored Cross-Site Scripting PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2024-7083 in Email Encoder Bundle (CVSS 4.4): Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 -…
CVE-2026-6294: Google PageRank Display <= 1.4 Cross-Site Request Forgery to Settings Update via Settings Page PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-6294 in Google Pagerank Display (CVSS 4.3): Google PageRank Display. Atomic Edge summarizes impact, exploitability, and patch details, with…
CVE-2026-6703: Responsive Blocks <= 2.2.1 Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via AJAX Actions PoC, Patch Analysis & Rule
April 24, 2026
Medium CVE-2026-6703 in Responsive Block Editor Addons (CVSS 4.3): Responsive Blocks. Atomic Edge summarizes impact, exploitability, and patch details, with…
CVE-2026-4118: Call To Action Plugin <= 3.1.3 Cross-Site Request Forgery via Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4118 in Call To Action Plugin (CVSS 4.3): Call To Action Plugin. Atomic Edge summarizes impact, exploitability, and patch…
CVE-2026-4089: Twittee Text Tweet <= 1.0.8 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4089 in Twittee Text Tweet (CVSS 6.4): Twittee Text Tweet. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4121: Kcaptcha <= 1.0.1 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4121 in Kcaptcha (CVSS 4.3): Kcaptcha. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule coverage.
CVE-2026-4279: Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4279 in Bread Butter (CVSS 6.4): Bread & Butter: Content Gating for Verified Leads. Atomic Edge summarizes impact, exploitability,…
CVE-2026-4133: TextP2P Texting Widget <= 1.7 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4133 in Textp2p Texting Widget (CVSS 4.3): TextP2P Texting Widget. Atomic Edge summarizes impact, exploitability, and patch details, with…
CVE-2026-4088: Switch CTA Box <= 1.1 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4088 in Switch Cta Box (CVSS 6.4): Switch CTA Box. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4085: Easy Social Photos Gallery <= 3.1.2 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper_class' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4085 in My Instagram Feed (CVSS 6.4): Easy Social Photos Gallery. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4076: Slider Bootstrap Carousel <= 1.0.7 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4076 in Slider Bootstrap Carousel (CVSS 6.4): Slider Bootstrap Carousel. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-4353: CI HUB Connector <= 1.2.106 Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-4353 in Ci Hub Connector (CVSS 6.4): CI HUB Connector. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-1845: Real Estate Pro <= 1.0.9 Authenticated (Admin+) Stored Cross-Site Scripting via Settings PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1845 in Re Pro (CVSS 5.5): Real Estate Pro. Atomic Edge summarizes impact, exploitability, and patch details.
CVE-2026-1930: Emailchef <= 3.5.1 Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Deletion PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1930 in Emailchef (CVSS 4.3): Emailchef. Atomic Edge summarizes impact, exploitability, and patch details. Update to 3.5.2.
CVE-2026-1923: Social Rocket – Social Sharing Plugin <= 1.3.4.2 Authenticated (Subscriber+) Stored Cross-Site Scripting via id PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1923 in Social Rocket (CVSS 6.4): Social Rocket – Social Sharing Plugin. Atomic Edge summarizes impact, exploitability, and patch…
CVE-2026-3361: WP Store Locator <= 2.2.261 Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpsl_address' Post Meta PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-3361 in Wp Store Locator (CVSS 6.4): WP Store Locator. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-1913: Gallagher Website Design <= 2.6.4 Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode Attribute PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1913 in Gallagher Website Design (CVSS 6.4): Gallagher Website Design. Atomic Edge summarizes impact, exploitability, and patch details. Update…
CVE-2026-1395: Gutentools <= 1.1.3 Authenticated (Contributor+) Stored Cross-Site Scripting via Post Slider Block Attributes PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1395 in Gutentools (CVSS 6.4): Gutentools. Atomic Edge summarizes impact, exploitability, and patch details. Update to 1.1.4.
CVE-2026-1379: HTTP Headers <= 1.19.2 Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting PoC, Patch Analysis & Rule
April 23, 2026
Medium CVE-2026-1379 in Http Headers (CVSS 4.4): HTTP Headers. Atomic Edge summarizes impact, exploitability, and patch details, with WAF rule…
←
1
…
45
46
47
48
49
…
120
→