| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Observable discrepancy in HTML in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium) |
| Information leak in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low) |
| Incorrect authorization in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
| Code injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted file. (Chromium security severity: Medium) |
| Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions. |
| Unauthenticated Broken Access Control in Simple Payment <= 2.5.2 versions. |
| Subscriber Broken Access Control in WpEvently <= 5.5.0 versions. |
| Rejecting as a duplicate of CVE-2026-78047 |
| Contributor Broken Access Control in WpEvently <= 5.5.0 versions. |
| Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions. |
| Subscriber Insecure Direct Object References (IDOR) in WP Job Portal <= 2.5.9 versions. |
| Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions. |
| Contributor Broken Access Control in ACF Extended <= 0.9.2.6 versions. |
| Contributor SQL Injection in WPBulky <= 1.2.2 versions. |
| UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium) |
| Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
| Information leak in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) |
| Incorrect reference resolution in WebView in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) |
| UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
