276370 matches found
EUVD-2026-62392
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391 WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Total Donations = 2.0.5 versions...
CVE-2026-73391
The WordPress Total Donations plugin (≤2.0.5) has an unauthenticated SQL Injection vulnerability rated CVSS 9.3 Critical. Patchstack reported it; no patch version or in-the-wild exploitation details are provided in the documents.
CVE-2026-73389 WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73390 WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...
CVE-2026-73389
CVE-2026-73389 is an unauthenticated PHP Object Injection vulnerability in the Kalles Addons WordPress plugin, affecting versions 1.0.6 and earlier . The flaw allows a remote, unauthenticated attacker to achieve full compromise of confidentiality, integrity, and availability, reflected in a CVSS ...
EUVD-2026-62391
Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...
CVE-2026-73390
The Total Donations WordPress plugin (versions ≤ 2.0.5) has an unauthenticated privilege escalation vulnerability allowing network attackers to gain elevated access without credentials. CVSS 9.8 (Critical) reflects high confidentiality, integrity, and availability impact. No root cause, patch ver...
EUVD-2026-62390
Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...
CVE-2026-73388 WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Nikstore Core = 1.5 versions...
CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
EUVD-2026-62388
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
EUVD-2026-62386
Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...
CVE-2026-73386 WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...
CVE-2026-73386
The WordPress plugin "Track Geolocation Of Users Using Contact Form 7" through version 3.0.2 exposes sensitive data to unauthenticated users over the network (CVSS 7.5 HIGH, C:H/I:N/A:N). No exploitation status or remediation details are provided in the documents. Monitor for plugin updates. Patc...
CVE-2026-73385 WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Outranking Plugin Options = 1.1.3 versions...
CVE-2026-73384 WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...
EUVD-2026-62385
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...