PT-2026-90567

Name of the Vulnerable Software and Affected Versions DS Ad Rotator WordPress plugin versions prior to 0.9 Description The image upload handler fails to perform capability checks, nonce verification, and file-type validation. This allows unauthenticated attackers to upload arbitrary files, such a...

PT-2026-90556

Name of the Vulnerable Software and Affected Versions Frontegg SAML SSO WordPress plugin versions prior to 1.0.2 Description The plugin fails to verify the signature or issuer of SAML authentication responses before establishing a session. This allows unauthenticated attackers to log in as any...

PT-2026-90583

The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...

PT-2026-90574

I discovered a CSRF vulnerability in BEAR – Bulk Editor and Products Manager Professional for WooCommerce. CVE-2026-84023 — Taxonomy Term Modification via CSRF Affected versions: 1.2.2 Fixed in: 1.2.2 https://t.co/VqYeibaeDi BugBounty CyberSecurity CVE WordPress...

PT-2026-90580

The WP Component WordPress plugin through 2.2.4 does not have any capability or nonce checks on one of the actions it makes available to unauthenticated users, and it takes both the option name and the option value from the request, allowing unauthenticated attackers to overwrite any of the site'...

PT-2026-90571

The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting it back in the course editor, allowing users with the instructor role to perform Stored Cross-Site Scripting attacks against higher privileged users such as administrators...

PT-2026-90579

Name of the Vulnerable Software and Affected Versions WP Images Upload on Piclect versions prior to 1.1 Description The plugin fails to validate the name or type of uploaded files before saving them to a publicly accessible directory. This allows unauthenticated attackers to upload arbitrary file...

CVE-2024-25600

Exploit de CVE-2024-25600 - WordPress Bricks Builder Ejecución Remota de Código RCE Un script de exploit para CVE-2024-25600 , una vulnerabilidad crítica de Ejecución Remota de Código RCE sin autenticación en el plugin Bricks Builder para WordPress. Esta herramienta detecta la falla, extrae el...

WordPress The Events Calendar plugin <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution vulnerability

Unauthenticated PHP Object Injection to Remote Code Execution vulnerability discovered by Chloe Chamberland, Wordfence Argus in WordPress Plugin The Events Calendar versions = 6.17.4...

WordPress The Events Calendar plugin <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution vulnerability

Unauthenticated Code Injection to Remote Code Execution vulnerability discovered by Chloe Chamberland, Wordfence Argus in WordPress Plugin The Events Calendar versions = 6.17.3...

WordPress GEO my WP plugin <= 4.5.5.3 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by yck in WordPress Plugin GEO my WordPress versions = 4.5.5.3...

WordPress MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin <= 4.2.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Nhien Pham nhienit nhienit, thevietronin in WordPress Plugin MPG versions = 4.2.1...

CVE-2026-62140

Unauthenticated Insecure Direct Object References IDOR in Quiz And Survey Master = 11.2.5 versions...

CVE-2026-62113

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62111

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

WordPress Tutor LMS – eLearning and online course solution plugin <= 4.0.7 - Authenticated (Subscriber+) PHP Object Injection to Remote Code Execution vulnerability

Authenticated Subscriber+ PHP Object Injection to Remote Code Execution vulnerability discovered by Chloe Chamberland, Wordfence Argus in WordPress Plugin Tutor LMS versions = 4.0.7...

WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin bbPress versions = 2.6.14...

Exploit for CVE-2026-14962

CVE-2026-14962 Wordpress Plugin ELEX WooCommerce Request a Quo...

CVE-2026-62088

The ElasticPress WordPress plugin (by 10up), versions through 5.3.4 , is affected by a Sensitive Data Exposure vulnerability classified as Insertion of Sensitive Information Into Sent Data. An unauthenticated remote attacker can retrieve embedded sensitive data, with a CVSS v3.1 score of 5.3 (Med...

CVE-2026-62088 WordPress ElasticPress plugin <= 5.3.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded Sensitive Data. This issue affects ElasticPress: from n/a through 5.3.4...