316239 matches found
CVE-2026-66574
CVE-2026-66574 is a Contributor-level Cross-Site Scripting (XSS) vulnerability in the Element Pack Elementor Addons WordPress plugin (by BDThemes), affecting versions 8.8.3 and below . The flaw was discovered by researcher Dthangws and rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/...
CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66574 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Element Pack Elementor Addons = 8.8.3 versions...
CVE-2026-66572 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...
CVE-2026-66573 WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...
CVE-2026-66573 WordPress JetTabs plugin <= 2.3.3.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...
CVE-2026-66572 WordPress JetBlog plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...
CVE-2026-66572
CVE-2026-66572 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress JetBlog plugin (versions
CVE-2026-66573
CVE-2026-66573 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress JetTabs plugin, affecting versions 2.3.3.1 and earlier . The vulnerability was discovered by nh4tvd and rated CVSS 3.1 6.5 (Medium) with a changed scope, indicating potential impact beyond the vulnerab...
CVE-2026-66571 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Asset CleanUp: Page Speed Booster = 1.4.0.5 versions...
CVE-2026-66571 WordPress Asset CleanUp: Page Speed Booster plugin <= 1.4.0.5 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Asset CleanUp: Page Speed Booster = 1.4.0.5 versions...
CVE-2026-66571
An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in the WordPress plugin Asset CleanUp: Page Speed Booster in versions ≤ 1.4.0.5 , as discovered by Helder Gonçalves and tracked by Patchstack. The CVSS 3.1 score is 7.1 (High) with a Changed Scope, indicating that a success...
CVE-2026-62104 WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...
CVE-2026-62108 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
CVE-2026-62104 WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...
CVE-2026-62108 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...
CVE-2026-62104
CVE-2026-62104 is an unauthenticated Remote Code Execution (RCE) vulnerability in the WordPress plugin Migratico Lite , affecting versions 2.6.8 and earlier . Discovered by Ananda Dhakal of Patchstack, the flaw allows a remote attacker with no prior access to execute arbitrary code on the host, r...
CVE-2026-62108
CVE-2026-62108 is an unauthenticated Broken Authentication vulnerability in the Headless Single Sign On WordPress plugin, affecting versions 1.7.0 and earlier . Discovered by Joost Grunwald and scored 9.8 (CRITICAL) via CVSS 3.1 (network vector, no privileges or user interaction required, high im...