Visualizer (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-16. Vendor: Unknown.

CVEs of Visualizer

• CVE-2026-86784 - CVSS 6.8 (medium), 2026-09-16: The Visualizer WordPress plugin before 4.0.8 does not sanitise and escape a chart's JSON data source configuration before outputting it back in the chart…
• CVE-2026-86782 - CVSS 5.5 (medium), 2026-09-11: The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and…
• CVE-2026-86779 - CVSS 2.7 (low), 2026-09-11: The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no…
• CVE-2026-19726 - CVSS 6.5 (medium), 2026-08-16: The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role…
• CVE-2026-14939 - CVSS 6.8 (medium), 2026-08-04: The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe address ranges before fetching it server-side, allowing users with…