Results
90,429· Page 947/1809Contributor Broken Access Control in Style Kits <= 2.6.5 versions.
Author Cross Site Scripting (XSS) in HashThemes Demo Importer <= 1.4.2 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LA-Studio LA-Studi
Contributor Local File Inclusion in Vino <= 1.9 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem
Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.
Subscriber Broken Access Control in ListingPro <= 2.9.10 versions.
Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
Unauthenticated Broken Access Control in Civi <= 2.2.4 versions.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Modula Im
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Avada Core <= 5.15.6 versions.
Contributor Cross Site Scripting (XSS) in Fluent Support <= 2.3.0 versions.
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.
Contributor Server Side Request Forgery (SSRF) in JetEngine <= 3.8.11 versions.
Custom role Server Side Request Forgery (SSRF) in JetBooking <= 4.1.2 versions.
Contributor Cross Site Scripting (XSS) in JetElements For Elementor <= 2.9.1.1 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.
Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.
Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions.
Unauthenticated Cross Site Request Forgery (CSRF) in Zarinpal Gateway <= 5.1.0 versions.
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby P
Subscriber Broken Access Control in ЮKassa для WooCommerce <= 2.16.1 versions.
Contributor Insecure Direct Object References (IDOR) in Product Slider for WooCommerce <= 1.13.62 versions.
Administrator Arbitrary File Upload in MapSVG <= 8.14.0 versions.
Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session
In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via develop
In JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activi
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configur
In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via project tool
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied linter configuration
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configur
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loca
In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project trust via project-loca
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured
In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default
Test your stack for 2026issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.