316378 matches found
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SiteVault – Backup, Restore, Migration & Cloning versions = 1.5.17...
WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability
Broken Authentication vulnerability discovered by Asim Alshaya in WordPress Plugin Advanced Google reCAPTCHA versions = 5.40...
WordPress WPO365 plugin <= 44.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Michał Wiencek in WordPress Plugin WPO365 versions = 44.1...
Wordpress---Auto-Exploit
WP-MASS-XP1 WordPress Mass Scanner with Real Exploits For CTF a...
WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by mamgad in WordPress Plugin Delete All Comments of wordpress versions = 7.1...
CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...
CVE-2026-39721
The Starter Templates WordPress plugin (astra-sites) versions 4.7.7 and below is vulnerable to a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels . No specific exploit information or remediation steps are...
CVE-2026-39721 WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...
WordPress Starter Templates plugin <= 4.7.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Elaprendiz1927 in WordPress Plugin Starter Templates versions = 4.7.7...
WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.1 - Other vulnerability Type vulnerability
Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Taxi Booking Manager for WooCommerce versions = 2.1.1...
WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...
WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin PowerPress Podcasting versions = 11.17.9...
CVE-2026-102393 WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through 4.7.7...
CVE-2026-102393 WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue affects Starter Templates: from n/a through 4.7.7...
CVE-2026-102393
The Brainstorm Force Starter Templates (astra-sites) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.7.7 . The documents do not provide specific details regarding...
WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by fcc in WordPress Plugin Starter Templates versions = 4.7.7...
WordPress Name Directory plugin <= 1.34.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Masaya Morita @mrtmyix in WordPress Plugin Name Directory versions = 1.34.2...
CVE-2026-104675 WordPress Event Tickets plugin <= 5.30.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through 5.30.0...
WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Presto Player versions = 4.5.2...