268375 matches found
PT-2026-95254
Name of the Vulnerable Software and Affected Versions Bookit — Booking & Appointment Calendar WordPress plugin versions prior to 2.6.0.5 Description An authorization check is missing in an appointment-retrieval action. This allows users with a low-privilege role specific to the plugin to access...
PT-2026-95700
Name of the Vulnerable Software and Affected Versions Cotonti versions prior to 1.0.1 Description The software contains an open redirect issue within the cot url check function. This occurs because the function uses a regular expression to validate redirect destinations that lacks an end-of-strin...
PT-2026-95704
Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description The contact plugin submission handler fails to validate anti-CSRF tokens. This allows attackers to use attacker-controlled pages to auto-submit contact forms, sending forged messages to the administrator inbox...
CVE-2026-92554: Improper Neutralization of Input During Web Page Generation
The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via Query-String Parameter Name in all versions up to, and including, 3.5.1 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-75961: Improper Neutralization of Special Elements used in an SQL Command
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
CVE-2026-13471: Authorization Bypass Through User-Controlled Key
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via the LatePointAbilityDeleteBooking::execute due to missing validation on a user controlled key. This makes it...
CVE-2019-25776: Improper Neutralization of Special Elements used in an SQL Command
Weaver E-cology contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by submitting malicious input through the userIdentifiers GET parameter in the mobile plugin endpoint. Attackers can bypass space-based filter controls by wrapping...
CVE-2026-93869: URL Redirection to Untrusted Site
Cotonti through 1.0.0 contains an open redirect vulnerability in the coturlcheck function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect user...
CVE-2026-93873: Cross-Site Request Forgery (CSRF)
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox...
CVE-2026-93870: Cross-Site Request Forgery (CSRF)
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the ratings plugin AJAX handler, allowing attackers to forge ratings on behalf of authenticated users. Attackers can craft malicious pages that auto-submit POST requests to modify stored rating data when visited by logged-in users...
CVE-2026-84071: Improper Neutralization of Special Elements used in an OS Command
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the Universal Connector plugin upload functionality. A privileged authenticated attacker can provide a malicious filename that is incorporated into a shell command executed by the application, potentially resulting in...
CVE-2026-85705: Improper Neutralization of Special Elements used in an SQL Command
The Location Manager plugin for WordPress is vulnerable to generic SQL Injection via 'latitude' and 'longitude' REST API Parameters in all versions up to, and including, 2.3.38 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
CVE-2026-92714: Authorization Bypass Through User-Controlled Key
The Download Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.3.68 via the duplicate function hooked on admininit. This is due to the handler only verifying the generic 'editposts' capability and a plugin-wide static nonce NONCEKEY...
CVE-2026-87771: Improper Neutralization of Special Elements used in an SQL Command
The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...
CVE-2026-81340: Authorization Bypass Through User-Controlled Key
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform per-object ownership or capability checks when updating orders through its REST API, allowing users with the Instructor role to modify any order on the site, granting free course enrolment, revoking other users'...
CVE-2026-15797: Improper Neutralization of Input During Web Page Generation
The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via posttitle in all versions up to, and including, 1.24.0 due to insufficient input sanitization and output escaping. This makes it...
CVE-2026-89008: Exposure of Sensitive Information to an Unauthorized Actor
The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5-specific role to read other...
CVE-2026-88844: Authorization Bypass Through User-Controlled Key
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50's Instructor role to disclose the names...