318446 matches found
WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ayukiab in WordPress Plugin Groundhogg versions = 4.8.3...
WordPress Video Conferencing with Zoom plugin <= 4.6.10 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Video Conferencing with Zoom versions = 4.6.10...
CVE-2026-97071
The VillaTheme CURCY (woo-multi-currency) WordPress plugin versions up to and including 2.2.17 is vulnerable to an Incorrect Calculation vulnerability (CWE-682). This flaw allows for Integer Attacks , potentially impacting the integrity of data during currency calculations. No specific exploitati...
WordPress CURCY plugin <= 2.2.17 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dcs in WordPress Plugin CURCY versions = 2.2.17...
WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Nixxies in WordPress Plugin WP Admin Audit versions = 1.2.17...
WordPress JS Help Desk plugin <= 4.0.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by KePulsary in WordPress Plugin JS Help Desk versions = 4.0.0...
WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin QR Redirector versions = 2.0.5...
CVE-2026-104404 WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0...
CVE-2026-104404
The GiveWP (formerly GiveWP give) WordPress plugin, versions n/a through 4.17.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inject malicious scripts into the application. The...
CVE-2026-104404 WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP: from n/a through 4.17.0...
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin GiveWP versions = 4.17.0...
CVE-2026-105068 WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: from n/a through 7.4.5...
WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Events Manager versions = 7.4.5...
WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin B Blocks versions = 2.1.8...
CVE-2026-104409 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Stored XSS.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.13...
WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.13...
WordPress SaveTo Wishlist Lite plugin < 1.1.5 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin SaveTo Wishlist Lite versions 1.1.5...
WordPress Unlimited Elements for Elementor plugin 1.5.142-2.0.20 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Jakub Herman in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions 1.5.142-2.0.20...
WordPress Loco Translate plugin < 2.8.9 - Translator+ Limited File Read vulnerability
Translator+ Limited File Read vulnerability discovered by Shivamani Vastrala in WordPress Plugin Loco Translate versions 2.8.9...