308497 matches found
WordPress Unlimited Elements For Elementor plugin <= 2.0.16 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Yuto Hyakumoto in WordPress Plugin Unlimited Elements For Elementor Free Widgets, Addons, Templates versions = 2.0.16...
WordPress UsersWP plugin <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability
Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by daroo in WordPress Plugin UsersWP versions = 1.2.70...
CVE-2026-84821
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84819
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81796
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81787
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81786
Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...
CVE-2026-81275
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin <= 1.0.23 - Missing Authorization vulnerability
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin = 1.0.23 - Missing Authorization vulnerability discovered by revblock in WordPress Plugin Booktics versions = 1.0.23...
WordPress Bold Timeline Lite plugin <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by zaim in WordPress Plugin Bold Timeline Lite versions = 1.2.8...
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821
CVE-2026-84821 affects the WP Fast Total Search WordPress plugin in versions
EUVD-2026-75536
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84816 WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...
CVE-2026-84819
Unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin WPAdverts affects versions ≤ 2.3.3 , as disclosed by researcher Ivaylo Atanassov via Patchstack. The flaw requires no authentication but does require user interaction, with a CVSS 3.1 score of 7.1 (HIGH) and changed ...
CVE-2026-84816
CVE-2026-84816 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress WPCS (Currency Switcher) plugin , affecting versions ≤ 1.3.2 . The flaw allows a remote, unauthenticated attacker to inject script via network access, requiring user interaction, with changed scope and ...