Veille CVE

Recherche « Unknown Smart Post »

6 CVE

Critique 0 Élevée 1 Moyenne 4 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Smart Post » ✕
  1. CVE-2026-90985 5.3 Moyenne

    Unknown WPC Smart Compare for WooCommerce

    The WPC Smart Compare for WooCommerce WordPress plugin before 6.6.1 does not apply WordPress's post-password protection when returning product content through its comparison handler, allowing unauthenticated users to read the description of password-protected products.

  2. CVE-2026-78150 2.7 Faible

    Unknown Smart Post

    The Smart Post WordPress plugin before 4.0.8 does not check the type, ownership or status of the post it is asked to duplicate, allowing users with contributor privileges and above to copy any private or password protected post into a draft of their own and read its content and metadata.

  3. CVE-2026-78149 5.3 Moyenne

    Unknown Smart Post

    The Smart Post WordPress plugin before 4.0.8 does not check whether a post is password protected before returning its content and its stored password through an unauthenticated AJAX action, allowing unauthenticated users to read protected post content and the password that guards it.

  4. CVE-2026-16979 4.3 Moyenne

    Unknown SmartCrawl SEO checker, analyzer & optimizer

    The SmartCrawl SEO checker, analyzer & optimizer WordPress plugin before 3.16.3 does not perform capability checks on two of its AJAX actions, allowing users with at least the Subscriber role to read the titles of private and draft posts by ID and to enumerate stored post-meta key names.

  5. CVE-2026-14203 4.8 Moyenne

    Unknown Smart Manager

    The Smart Manager WordPress plugin before 8.92.0 does not properly encode a post field before rendering it into an HTML attribute in its management grid, allowing users with the Contributor role or above to inject JavaScript that executes in the browser session of an administrator who views the grid.

  6. CVE-2026-10735 7.5 Élevée

    Unknown smart-post-show-pro · Unknown Real Testimonials Pro · Unknown Product Slider for WooCommerce Pro

    Multiple Shapedsmart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 Pro smart-post-show-pro WordPress plugin before 4.0.2, Real Testimonials Pro WordPress plugin before 3.2.5, Product Slider for WooCommerce Pro WordPress plugin before 3.5.3 were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.