WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin LearnPress versions = 4.4.9...

WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Login Lockdown versions = 2.17...

WordPress Import and export users and customers plugin <= 2.5.5 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Import and export users and customers versions = 2.5.5...

WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteVault – Backup, Restore, Migration & Cloning versions = 1.5.17...

WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Advanced Google reCAPTCHA versions = 5.40...

WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Michał Wiencek in WordPress Plugin WPO365 versions = 44.1...

Wordpress---Auto-Exploit

WP-MASS-XP1 WordPress Mass Scanner with Real Exploits For CTF a...

WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mamgad in WordPress Plugin Delete All Comments of wordpress versions = 7.1...

CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...

CVE-2026-39721

The Starter Templates WordPress plugin (astra-sites) versions 4.7.7 and below is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . No specific exploit information or remediation steps are...

CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...

WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Elaprendiz1927 in WordPress Plugin Starter Templates versions = 4.7.7...

WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability

Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Taxi Booking Manager for WooCommerce versions = 2.1.1...

WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

CVE-2026-102393 WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through 4.7.7...

CVE-2026-102393 WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through 4.7.7...

CVE-2026-102393

The Brainstorm Force Starter Templates (astra-sites) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.7.7 . The documents do not provide specific details regarding...

WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by fcc in WordPress Plugin Starter Templates versions = 4.7.7...

WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin Name Directory versions = 1.34.2...