318281 matches found
CVE-2026-105059 WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...
CVE-2026-105059 WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1...
EUVD-2026-93085
Subscriber Broken Access Control in Delete All Comments of wordpress = 7.1 versions...
CVE-2026-104814
The Form Block WordPress plugin in versions
CVE-2026-104814 WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Form Block = 1.8.1 versions...
CVE-2026-104757
The WordPress Import and export users and customers plugin (versions
CVE-2026-104672 WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.17.0 versions...
CVE-2026-104670 WordPress LearnPress plugin <= 4.4.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in LearnPress = 4.4.9 versions...
CVE-2026-104406
The WordPress picu plugin (versions
CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in picu = 3.10.1 versions...
CVE-2026-104405 WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in GiveWP = 4.17.0 versions...
CVE-2026-104406 WordPress picu plugin <= 3.10.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in picu = 3.10.1 versions...
CVE-2026-104395
The WordPress picu plugin versions
CVE-2026-104394
The Charitable plugin for WordPress , affecting versions
CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...
CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...
CVE-2026-104385 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...
CVE-2026-104385 WordPress Groundhogg plugin <= 4.8.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...