Veille CVE

Semaine du 12 octobre au 18 octobre 2026

2 CVE

  1. CVE-2026-108175 6.5 Moyenne

    PluginUs.Net MDTF

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.This issue affects MDTF: from n/a through 1.4.0.

  2. CVE-2026-108151 5.3 Moyenne

    PluginUs.Net MDTF

    Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: from n/a through 1.3.9.