cve.bz

OWASP A05:2025 Injection vulnerabilities, newest first, page 71

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A05:2025 at MITRE.

Its weaknesses: 37

CWE-20, CWE-74, CWE-76, CWE-77, CWE-78, CWE-79, CWE-80, CWE-83, CWE-86, CWE-88, CWE-89, CWE-90, CWE-91, CWE-93, CWE-94, CWE-95, CWE-96, CWE-97, CWE-98, CWE-99, CWE-103, CWE-104, CWE-112, CWE-113, CWE-114, CWE-115, CWE-116, CWE-129, CWE-159, CWE-470, CWE-493, CWE-500, CWE-564, CWE-610, CWE-643, CWE-644, CWE-917

  1. 7.1CVE-2026-97237EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.14.3.

  2. 6.5CVE-2026-97236EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

  3. 7.1CVE-2026-97235EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in ThemeREX Addons < 2.45.0 versions.

  4. 7.1CVE-2026-97077EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Ad Inserter <= 2.8.18 versions.

  5. 6.5CVE-2026-97067EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in EWWW Image Optimizer <= 8.7.7 versions.

  6. 7.1CVE-2026-97065EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Happyforms <= 1.26.15 versions.

  7. 8.8CVE-2026-96837EPSS 0.5%

    Contributor Remote Code Execution (RCE) in CartFlows <= 3.2.0 versions.

  8. 7.1CVE-2026-96836EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Parsi Date <= 6.3 versions.

  9. 6.5CVE-2026-96835EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in King Addons for Elementor <= 51.1.85 versions.

  10. 7.1CVE-2026-96830EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

  11. 6.5CVE-2026-96829EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in The Plus Addons for Elementor Page Builder Lite <= 6.5.1 versions.

  12. 7.6CVE-2026-96828EPSS 0.3%

    Administrator SQL Injection in Category Discount Woocommerce <= 5.18 versions.

  13. 7.6CVE-2026-96827EPSS 0.3%

    Administrator SQL Injection in Admin Notices Manager <= 1.6.0 versions.

  14. 9.3CVE-2026-96822EPSS 0.3%

    Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.

  15. 7.1CVE-2026-96820EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

  16. 7.1CVE-2026-96819EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions.

  17. 7.1CVE-2026-96816EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Trusted Shops Easy Integration for WooCommerce <= 2.0.6 versions.

  18. 7.1CVE-2026-96814EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in WooCommerce Product Table Lite <= 5.6.7 versions.

  19. 5.4CVE-2026-96450EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in pixfort Core < 4.3.3 versions.

  20. 7.1CVE-2026-96352EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in YITH WooCommerce Ajax Search <= 2.28.0 versions.

  21. 7.1CVE-2026-96351EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 6.1.3 versions.

  22. 10.0CVE-2026-96349EPSS 0.7%

    Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.

  23. 7.6CVE-2026-96346EPSS 0.3%

    Author SQL Injection in WP ERP <= 1.17.9 versions.

  24. 7.6CVE-2026-96345EPSS 0.3%

    Administrator SQL Injection in Estatik <= 4.3.5 versions.

  25. 6.5CVE-2026-96338EPSS 0.2%

    Subscriber Cross Site Scripting (XSS) in Profile Builder <= 4.0.2 versions.

  26. 6.5CVE-2026-94674EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

  27. 9.0CVE-2026-94389EPSS 0.4%

    Unauthenticated Remote Code Execution (RCE) in AcyMailing SMTP Newsletter <= 11.0.5 versions.

  28. 8.5CVE-2026-94177EPSS 0.3%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects GamiPress: from n/a through 8.0.2.

  29. 8.5CVE-2026-94115EPSS 0.3%

    Contributor SQL Injection in Easy Pricing Tables <= 4.1.2 versions.

  30. 7.6CVE-2026-94082EPSS 0.3%

    Author SQL Injection in Quiz Cat <= 3.1.1 versions.

  31. 7.1CVE-2026-94081EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in WordPress Persistent Login <= 3.1.3 versions.

  32. 7.1CVE-2026-94078EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.

  33. 6.5CVE-2026-94077EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.

  34. 7.1CVE-2026-93770EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in WP Statistics <= 14.16.13 versions.

  35. 8.2CVE-2026-93621EPSS 0.2%

    Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.

  36. 7.1CVE-2026-93514EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Notification for Telegram <= 3.5.2 versions.

  37. 7.1CVE-2026-93512EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in JW Player for WordPress <= 2.3.11 versions.

  38. 7.6CVE-2026-62085EPSS 0.3%

    Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.

  39. 6.5CVE-2026-62080EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Happy Addons for Elementor <= 3.23.1 versions.

  40. 6.5CVE-2026-62079EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions.

  41. 6.5CVE-2026-62078EPSS 0.2%

    Contributor Cross Site Scripting (XSS) in Premium Addons for Elementor <= 4.11.105 versions.

  42. 7.1CVE-2026-27371EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

  43. 2.7CVE-2026-27085EPSS 0.2%

    Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions.

  44. 8.3CVE-2026-103321EPSS 0.4%

    MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered…

  45. 2.0CVE-2026-103117EPSS 0.3%

    A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3. Affected is the function db_properties of the file functions/DatabaseInc.php of the component Save Data Handler. Such manipulation of the argument values leads …

  46. 2.1CVE-2026-103116EPSS 0.2%

    A weakness has been identified in OS4ED openSIS-Classic up to 9.3. This impacts the function DBQuery of the file functions/GetStuListFnc.php of the component Student List Search Endpoint. This manipulation of the argument LO_sort causes sq…

  47. 2.1CVE-2026-103115EPSS 0.2%

    A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3. This affects an unknown function of the file functions/CustomFieldsFnc.php of the component Student Search. The manipulation of the argument cust results in sql inject…

  48. 7.1CVE-2026-102398EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions.

  49. 7.1CVE-2026-102396EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic <= 1.5.5 versions.

  50. 7.1CVE-2026-102395EPSS 0.2%

    Unauthenticated Cross Site Scripting (XSS) in Easy Google Maps <= 1.14.6 versions.