AEGLIX intelligence library
Search retained source observations. Historical records do not establish current threat activity; always check the original source before acting.
The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitizat…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:51.907
Explore vulnerabilityThe xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including,…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:51.760
Explore vulnerabilityThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that …
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:51.620
Explore vulnerabilityThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. This makes it possib…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:51.480
Explore vulnerabilityThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that …
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:48.427
Explore vulnerabilityThe Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up to, and including, 2…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:48.260
Explore vulnerabilityThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 This is due to the plug…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:48.113
Explore vulnerabilityThe LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' request parameter du…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:47.780
Explore vulnerabilityThe EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.260413 due to insuffi…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T04:16:47.413
Explore vulnerabilityThe Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.4 via th…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.740
Explore vulnerabilityThe Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 due to insufficient…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.613
Explore vulnerabilityThe Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.480
Explore vulnerabilityThe LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments (checkout)' paramet…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.340
Explore vulnerabilityThe Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authori…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.213
Explore vulnerabilityThe Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 via the 'context' par…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:28.083
Explore vulnerabilityThe Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.3.2 via deserialization of untrusted …
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T03:16:27.927
Explore vulnerabilityAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validation of user-supplied f…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T02:17:18.877
Explore vulnerabilityAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary fil…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T02:17:18.750
Explore vulnerabilityAn issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficient neutralization of…
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T02:17:18.610
Explore vulnerabilityMage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
Source: nvd_cves · Retrieved:
Source date: 2026-10-17T02:17:18.470
Explore vulnerability