316982 matches found
WP < 7.1.3 - Author+ SQLi via WXR Export
Description WordPress does not properly validate some post meta values before using them in a database query when exporting content in some cases, which could allow users with Author-level access and above to store a crafted value that results in SQL injection executed when an administrator later...
WP < 7.1.3 - Author+ Sticky Post via REST API
Description WordPress does not correctly verify user capabilities before allowing a post to be set as sticky via the REST API in some cases, which could allow users with Author-level access and above to feature their own posts on the site front page, an action intended to require higher privilege...
WP < 7.1.3 - Action Injection via Post Status Transition Dynamic Hooks
Description WordPress does not restrict some dynamically generated action hook names to registered post statuses and types during a status transition in some cases, which could allow an attacker who can introduce a post with attacker-controlled status or type through a separate vulnerability to...
PT-2026-106447
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...
PT-2026-106468
Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...
CVE-2026-66666: Insertion of Sensitive Information Into Sent Data
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6...
PT-2026-106340
Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...
PT-2026-106339
Name of the Vulnerable Software and Affected Versions Deema Payment Gateway versions prior to 1.1.3 Description The Deema Payment Gateway WordPress plugin fails to verify payments with the payment provider when processing the return from a hosted checkout. Additionally, the plugin does not valida...
CVE-2026-75962: Improper Neutralization of Input During Web Page Generation
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...
CVE-2026-94278: Improper Access Control
The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...
CVE-2026-39775: Incorrect Privilege Assignment
Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...
CVE-2026-39752: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...
PT-2026-106385
Subscriber Broken Access Control in Delete All Comments of wordpress = 7.1 versions...
CVE-2026-94271: Improper Authentication
The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being...
CVE-2026-32579: Unrestricted Upload of File with Dangerous Type
Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress = 2.4.9 versions...
CVE-2026-105701: Unrestricted Upload of File with Dangerous Type
The ACPT Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates. This makes ...
VulnCheck KEV: CVE-2026-94504
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...
VulnCheck KEV: CVE-2026-93836
The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'qty' parameter in all versions up to, and including, 8.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2026-106338
Name of the Vulnerable Software and Affected Versions Deema Payment Gateway versions prior to 1.1.3 Description The Deema Payment Gateway WordPress plugin fails to verify the authenticity of incoming payment provider notifications. Because this verification is disabled by default, unauthenticated...