CWE-82

CVEs per yearBy the year they were published

1. 20231
2. 20245
3. 20251
4. 20261

Newest CVEs

• CVE-2026-56735

  Zammad: Improper neutralization of `srcset` attribute in IMG tags in Zammad

  zammad · zammad

  Medium5.3
• CVE-2025-53194

  WordPress JetEngine <= 3.7.0 - Remote Code Execution (RCE) Vulnerability

  Crocoblock · JetEngine

  High8.5
• CVE-2024-52427

  WordPress Event Tickets with Ticket Scanner plugin <= 2.3.11 - Remote Code Execution (RCE) vulnerability

  Vollstart · Event Tickets with Ticket Scanner

  Critical9.9
• CVE-2024-52434

  WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability

  supsystic · Popup by Supsystic

  Critical9.1
• CVE-2024-52393

  WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability

  Eric Teubert · Podlove Podcast Publisher

  Critical9.1
• CVE-2024-48042

  WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

  supsystic · Contact Form by Supsystic

  Critical9.1
• CVE-2024-49271

  WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.121 - Remote Code Execution (RCE) vulnerability

  Unlimited Elements · Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

  Critical9.1
• CVE-2023-30963

  Stored XSS in Foundry Slate Query Dropdown menu

  Palantir · com.palantir.foundry:foundry-frontend

  Medium5.4

Vendors it comes up for most

1. supsystic2
2. Crocoblock1
3. Eric Teubert1
4. Palantir1
5. Unlimited Elements1
6. Vollstart1
7. zammad1