277579 matches found
CVE-2026-66462 WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...
CVE-2026-66461
CVE-2026-66461 is a vulnerability in the WordPress SMEPay: UPI Gateway for WooCommerce plugin (versions
CVE-2026-66461 WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
CVE-2026-66462
Summary (CVE-2026-66462) : Unauthenticated sensitive data exposure in the WordPress WooCommerce Appointments plugin, versions ≤ 5.3.8. The vulnerability affects the plugin itself (no vendor/component details beyond the plugin) and is described as unauthenticated exposure of sensitive data. No exp...
CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...
EUVD-2026-57879
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...
CVE-2026-66460
CVE-2026-66460 affects the WordPress AfterShip Tracking plugin for WooCommerce, version
CVE-2026-66460
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...
CVE-2026-66459 WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66458
Unauthenticated SQL Injection in RealPress = 1.1.2 versions...
CVE-2026-66458
The CVE核 (CVE-2026-66458) concerns the WordPress RealPress plugin, specifically versions <= 1.1.2. The connected sources confirm an unauthenticated SQL Injection vulnerability affecting RealPress, with no details provided on the root cause within these documents beyond the vulnerability type. ...
CVE-2026-66459
CVE-2026-66459 concerns the WordPress plugin AI for SEO, affected versions
CVE-2026-66458 WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in RealPress = 1.1.2 versions...
CVE-2026-66459
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
EUVD-2026-57878
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
EUVD-2026-57877
Unauthenticated SQL Injection in RealPress = 1.1.2 versions...
CVE-2026-66456 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...
CVE-2026-66456
CVE-2026-66456 concerns the WordPress plugin Profile Extra Fields by BestWebSoft , specifically versions ≤ 1.3.4. The vulnerability is a Subscriber Cross Site Scripting (XSS) flaw in the profile extra fields. The provided documents identify the affected product and the vulnerable component but do...