Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2026-111828Classified Listing · Improper Validation of Specified Quantity in Input Medium4.3EPSS 0.2%2026-10-19CVE Database V5CVE-2026-111828 Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-19
Medium	6.5	EPSS 0.2%	CVE-2026-94665Classified Listing · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Mamunur Rashid… Medium6.5EPSS 0.2%2026-10-09CVE Database V5CVE-2026-94665 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This issue affects Classified Listing: from n/a through 6.1.2. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-09
High	7.1	EPSS 0.2%	CVE-2026-95596ShopBuilder – Elementor WooCommerce Builder Addons · Cross-site Scripting High7.1EPSS 0.2%2026-10-09CVE Database V5CVE-2026-95596 CVE-2026-95596 is a reflected cross-site scripting (XSS) vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons. It affects versions from 0 up to but not including 3.4.2. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to execute malicious scripts in the context of the affected web application. The CVSS 3.1 score is 7.1, indicating a high severity level. EPSS 0.2%Vulnerability Mamunur Rashid	CVE Database V5	2026-10-09
Medium	6.5	EPSS 0.2%	CVE-2026-97280Review Schema · Missing Authorization Medium6.5EPSS 0.2%2026-10-01CVE Database V5CVE-2026-97280 Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Review Schema: 3.1.0. EPSS 0.2%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-10-01
Medium	5.4	EPSS 0.3%	CVE-2026-84217Classified Listing · Missing Authorization Medium5.4EPSS 0.3%2026-09-02CVE Database V5CVE-2026-84217 Missing Authorization vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.3. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862 #ghsa-gh5v-3gj8-m99h	CVE Database V5	2026-09-02
High	7.1	EPSS 0.3%	CVE-2026-42658Classified Listing · Cross-site Scripting High7.1EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42658 Unauthenticated Cross Site Scripting (XSS) in Classified Listing <= 5.3.8 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-79	CVE Database V5	2026-06-15
Medium	6.3	EPSS 0.3%	CVE-2026-42651Classified Listing · Missing Authorization Medium6.3EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42651 Subscriber Broken Access Control in Classified Listing <= 5.3.9 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.3%	CVE-2026-42640Classified Listing · Missing Authorization Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42640 Unauthenticated Broken Access Control in Classified Listing <= 5.3.8 versions. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.4%	CVE-2026-42679Classified Listing · Path Traversal Medium6.5EPSS 0.4%2026-06-01CVE Database V5CVE-2026-42679 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mamunur Rashid Classified Listing allows Path Traversal. This issue affects Classified Listing: from n/a through 5.3.8. EPSS 0.4%Vulnerability Mamunur Rashid #cwe-22	CVE Database V5	2026-06-01
Medium	4.3	EPSS 0.3%	CVE-2026-49054The Post Grid · Missing Authorization Medium4.3EPSS 0.3%2026-05-27CVE Database V5CVE-2026-49054 Missing Authorization vulnerability in Mamunur Rashid The Post Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Post Grid: from n/a through 7.9.2. EPSS 0.3%Vulnerability Mamunur Rashid #cwe-862	CVE Database V5	2026-05-27

Showing 1–10 of 10 results