280242 matches found
CVE-2026-84768
CVE-2026-84768 affects the WordPress VikAppointments Services Booking Calendar plugin in versions 1.2.20 and earlier . The vulnerability is an unauthenticated SQL Injection , meaning an attacker can exploit it without prior access or credentials. The CVSS 3.1 base score is 9.3 (CRITICAL) , with a...
CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
CVE-2026-84767
An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...
CVE-2026-84766 WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84767 WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84765
Breadcrumb NavXT , a popular WordPress plugin, is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions 7.5.1 and earlier . The flaw is classified with a CVSS 3.1 score of 7.1 (HIGH) , reflecting a network attack vector, low complexity, no privileges required, but re...
CVE-2026-84765 WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
CVE-2026-84763
CVE-2026-84763 affects the RTMKit (Rome Theme for Elementor) WordPress plugin, versions 2.1.5 and earlier . The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw, scored CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. The changed scope indicates the im...
EUVD-2026-70582
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84763 WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84762
CVE-2026-84762 affects the WP EasyPay WordPress plugin in versions 4.5.3 and earlier . The vulnerability is an unauthenticated bypass that allows a remote attacker with no privileges and no user interaction to achieve low integrity impact , scoring CVSS 5.3 (Medium) . The specific component or ro...
CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
CVE-2026-84761
CVE-2026-84761 affects the WordPress LiteSpeed Cache plugin in versions 7.9 and earlier , where an unauthenticated Server Side Request Forgery (SSRF) flaw is present. The CVSS v3.1 score is 7.2 (HIGH) with a Changed scope and low impacts to both confidentiality and integrity, while availability i...
CVE-2026-84758
An unauthenticated Broken Access Control vulnerability affects the WordPress Business Directory plugin in versions 6.4.26 and earlier . A remote attacker with no prior access can exploit this flaw over the network with low complexity and no user interaction, resulting in low integrity and low ava...
CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-84758 WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
CVE-2026-84757
CVE-2026-84757 affects the WordPress WP Compress plugin in versions 7.21.28 and earlier . The vulnerability is an unauthenticated Settings Change , meaning an attacker with no prior access can modify plugin settings over the network without any user interaction. This yields a CVSS 3.1 base score ...