tplugins Schwachstellen (CVE)

Für tplugins veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

4.3Mittel

CVE-2026-4128 vor 6 Monaten

TP Restore Categories And Taxonomies <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion via 'tpmcattt_delete_term' AJAX Action

tplugins TP Restore Categories And Taxonomies

The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1. The delete_term() function, which handles the 'tpmcattt_delete_term' AJAX action, does not perform any capability…

6.4Mittel

CVE-2025-5092 vor 11 Monaten

Multiple Plugins and Themes <= (Various Versions) - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via lightGallery JavaScript Library

lightgalleryteam LightGallery WP; tplugins TP WooCommerce Product Gallery; vowelweb Ibtana – WordPress Website Builder; wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. Thi…