Veille CVE

Octobre 2026

2 CVE

  1. CVE-2026-94641 7.1 Élevée

    Stiofan UsersWP

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from n/a through 1.2.73.

  2. CVE-2026-103086 6.5 Moyenne

    Stiofan UsersWP

    Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74.