CVE-2026-19902 Ad Inserter <= 2.8.18 - Reflected Cross-Site Scripting via {search-query} Dynamic Tag (Referer Header)

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Referer header in all versions up to, and including, 2.8.18 due to insufficient input sanitization and output escaping on the 'search-query' dynamic tag. When an ad block's code...

CVE-2026-75957

The Ultimate Multisite WordPress plugin (versions ↜ 2.15.0 ) is vulnerable to an Authentication Bypass via the checkout_form parameter in the login_customer_after_checkout function. The publicly accessible wu_ajax_nopriv_wu_validate_form AJAX handler accepts a freely obtainable nonce. When the ch...

EUVD-2026-90546

The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the checkoutform parameter of the logincustomeraftercheckout function. This is due to the publicly accessible...

EUVD-2026-90543

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-90544

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-93882 LearnPress <= 4.4.8 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'item_id' Parameter

The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.4.8 via the CourseMaterialTemplate::rendermaterialitems callback exposed on the public lp-ajax-handle...

CVE-2026-93882

The LearnPress – WordPress LMS Plugin (versions up to and including 4.4.8 ) is vulnerable to an Insecure Direct Object Reference (IDOR) in the CourseMaterialTemplate::render_material_items() callback. This function is exposed via the public lp-ajax-handle (load_content_via_ajax) endpoint, which i...

CVE-2026-89047

The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...

WordPress ClearSale Total plugin <= 3.4.2 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Catalin Oancea 0x4D5A in WordPress Plugin ClearSale Total versions = 3.4.2...

WordPress Zella Theme theme < 2.6.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Theme Zella Theme versions 2.6.3...

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Аутентифицированное Contributor+ произвольное чтение файлов Плагин AI Engine for WordPress содержит уязвимость в функции вставки изображений, которая позволяет любому аутентифицированному пользователю с правами редактирования запис...

cve-2026-3359-exp

CVE-2026-3359 — это неаутентифицированная уязвимость SQL-инъекции, находящаяся в плагине WordPress "Form Maker" от Web10 во всех версиях до версии 1.15.42. Чтобы использовать этот PoC/эксплойт, сначала настройте виртуальное окружение с помощью команд "virtualenv имя вашего окружения" или "venv им...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

WordPress Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin <= 2.15.0 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by zickzick2 in WordPress Plugin Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform versions = 2.15.0...

WordPress Super Forms – Drag & Drop Form Builder plugin <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File/Directory Deletion vulnerability

Authenticated Subscriber+ Arbitrary File/Directory Deletion vulnerability discovered by d.v4ns3c in WordPress Plugin Super Forms versions = 6.3.316...

sudowp-postgallery

SudoWP PostGallery 보안 포크 기여자: SudoWP, WP Republic 원저자: RTO GmbH 태그: 갤러리, 보안, 패치됨, cve-2025-13543 최소 요구 버전: 5.8 테스트 완료 버전: 6.7 안정 버전: 1.12.6 라이선스: GPLv2 이상 보안 공지 이 플러그인은 중단된 "PostGallery" 플러그인의 보안 강화 포크 입니다. 원본 플러그인은 심각한 보안 취약점으로 인해 2025년 12월 2일 WordPress.org에서 폐쇄되었습니다. 원본 플러그인 링크:...

CVE-2026-96200

The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthenticated attackers to mark arbitrary orders as paid without payment...

CVE-2026-96173

The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public payment-callback request, allowing unauthenticated attackers to obtain the order key of an arbitrary order and view its contents...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...