All CVEs — page 365 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A stored XSS vulnerability in JetBrains YouTrack before 2026.2.19422 allows attackers to inject malicious scripts via Mermaid and LaTeX content, potentially leading to data exfiltration or client-side code execution.
The WPC Shop as a Customer for WooCommerce plugin allows privilege escalation via account takeover, enabling an attacker to gain full Administrator access without the need for a password.
The flaw allows authenticated attackers with Subscriber-level access to delete arbitrary files and directories, potentially leading to full site takedown and remote code execution.