308326 matches found
EUVD-2026-90546
The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the checkoutform parameter of the logincustomeraftercheckout function. This is due to the publicly accessible...
EUVD-2026-90543
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
EUVD-2026-90544
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...
CVE-2026-93882 LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...
CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...
CVE-2026-93882
The LearnPress – WordPress LMS Plugin (versions up to and including 4.4.8 ) is vulnerable to an Insecure Direct Object Reference (IDOR) in the CourseMaterialTemplate::render_material_items() callback. This function is exposed via the public lp-ajax-handle (load_content_via_ajax) endpoint, which i...
WordPress ClearSale Total plugin <= 3.4.2 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Catalin Oancea 0x4D5A in WordPress Plugin ClearSale Total versions = 3.4.2...
WordPress Zella Theme theme < 2.6.3 - Unauthenticated Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Theme Zella Theme versions 2.6.3...
CVE-2025-13380
AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Authenticated Contributor+ Arbitrary File Read The AI Engine for WordPress plugin contains a vulnerability in its image insertion feature that allows any authenticated user with post editing capabilities Contributor, Author, Editor...
cve-2026-3359-exp
CVE-2026-3359 es una vulnerabilidad de Inyección SQL sin autenticar ubicada dentro del complemento "Form Maker" de WordPress de Web10 en todas las versiones hasta la versión 1.15.42. Para utilizar este PoC/exploit, primero configure un entorno virtual mediante los comandos "virtualenv nombre de s...
WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...
WordPress Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin <= 2.15.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by zickzick2 in WordPress Plugin Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform versions = 2.15.0...
WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion vulnerability
Authenticated Subscriber+ Arbitrary File/Directory Deletion vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...
sudowp-postgallery
SudoWP PostGallery Fork de Seguridad Contribuidores: SudoWP, WP Republic Autores originales: RTO GmbH Etiquetas: gallery, security, patched, cve-2025-13543 Requiere al menos: 5.8 Probado hasta: 6.7 Versión estable: 1.12.6 Licencia: GPLv2 o posterior Aviso de Seguridad Este es un fork reforzado en...
CVE-2026-96200
The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment...
CVE-2026-92412
The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...
CVE-2026-96173
The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public payment-callback request, allowing unauthenticated attackers to obtain the order key of an arbitrary order and view its contents...
CVE-2026-90974
The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to overwrite the site's CRM integration endpoint and credentials, after which synced user data is delivered to an...