277678 matches found
CVE-2026-66443
CVE-2026-66443 affects the WordPress REST API Log plugin, specifically versions
CVE-2026-66443 WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
CVE-2026-66444 WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444
Affected software: WordPress Payment Forms for Paystack plugin
CVE-2026-66441
CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...
CVE-2026-66436
CVE-2026-66436 refers to an unauthenticated SQL injection in the WordPress plugin “Active Products Tables for WooCommerce” (versions
CVE-2026-66436 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...
CVE-2026-66441 WordPress MultiVendorX plugin <= 5.0.10 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
EUVD-2026-57865
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432
CVE-2026-66432 affects the WordPress WPJAM Basic plugin, versions
CVE-2026-66432 WordPress WPJAM Basic plugin <= 7.0.2.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66432
Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...
CVE-2026-66430
CVE-2026-66430 describes an SQL Injection in the WordPress plugin Visitor Traffic Real Time Statistics Pro (versions
CVE-2026-66431 WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...
CVE-2026-66430 WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - SQL Injection vulnerability
Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
EUVD-2026-57862
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...
CVE-2026-66429
The CVE concerns WordPress Plugin Visitor Traffic Real Time Statistics Pro (versions up to 11.10) with an unauthenticated Cross-Site Scripting (XSS) vulnerability. The affected component is the plugin’s web-facing handling that allows injection of script by an attacker without authentication; imp...
CVE-2026-66429 WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.10 versions...