275903 matches found
CVE-2026-18315 TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...
EUVD-2026-62630
The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key leading to Account Takeover in all versions up to, and including, 1.2.6. This is due to the adminusercreatecus AJAX handler lacking any authentication o...
EUVD-2026-62595
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
CVE-2026-32475
Elementor Pro WordPress plugin (≈6,000,000 active installations) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.2.1 . The root cause is a logic error in the Upload::validation() function where return is used instead of continue when the first array el...
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin Elementor Pro versions = 4.2.1...
CVE-2026-73389
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73390
Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...
CVE-2026-73387
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73391
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73384
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...
CVE-2026-73364
Customer PHP Object Injection in Flexible Subscriptions = 1.8.1 versions...
CVE-2026-73385
Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...
CVE-2026-73347
Unauthenticated Privilege Escalation in TrueBooker = 1.2.6 versions...
CVE-2026-73354
Unauthenticated Cross Site Scripting XSS in SimplyRETS Real Estate IDX = 3.2.8 versions...
CVE-2026-73184
Unauthenticated Cross Site Scripting XSS in Global Gallery = 11.1.2 versions...
CVE-2026-73182
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...