294242 matches found
WordPress BackWPup plugin 5.2.2-5.7.4 - BackWPup Jobs Checker+ Database Backup Exfiltration vulnerability
BackWPup Jobs Checker+ Database Backup Exfiltration vulnerability discovered by Charles Vosburgh in WordPress Plugin BackWPup versions 5.2.2-5.7.4...
EUVD-2026-75973
The BackWPup WordPress plugin before 5.7.5 does not properly restrict access to several of its REST API routes for job, backup-destination, and backup-execution management, allowing users holding a BackWPup WordPress plugin before 5.7.5-defined, administrator-assigned limited role to create and r...
CVE-2026-86812 WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API
The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...
CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
CVE-2026-86781
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin, in versions before 4.7.40 , is vulnerable to unauthorized data disclosure. The root cause is a lack of capability or nonce checks on a certificate-file download routine that executes early in the WordPress admin request l...
WordPress Visualizer plugin 4.0.0-4.0.5 - Contributor+ Arbitrary Post/Page Modification vulnerability
Contributor+ Arbitrary Post/Page Modification vulnerability discovered by Artus KG in WordPress Plugin Visualizer versions 4.0.0-4.0.5...
CVE-2026-86781 SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download...
CVE-2026-86782 Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
CVE-2026-86812 WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API
The WPCafe WordPress plugin before 3.0.18 does not correctly restrict access to a set of order-management REST endpoints because their permission callbacks return an incorrect type on failure, allowing unauthenticated users to disclose guest order information and to change the status of, or trash...
EUVD-2026-75970
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download...
CVE-2026-86781 SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download...
EUVD-2026-75971
The Visualizer WordPress plugin before 4.0.6 does not properly authorise access to its chart-building actions, allowing users with the Contributor role and above to publish, rename, and overwrite the content of posts and pages they do not own, including other users' private drafts...
CVE-2026-86780 Featured Image with URL < 1.0.6 - Contributor+ Stored XSS via Image Alt Text
The Featured Image with URL WordPress plugin before 1.0.6 does not sanitise and escape a stored image attribute value before outputting it, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the...
CVE-2026-86779 Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including chart...
CVE-2026-85678 AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it inside a script tag on the front end, allowing users with contributor level access and above to store arbitrary JavaScript that will execute in the browser of anyone who views t...
CVE-2026-85677
The Gutenverse News WordPress plugin (versions before 3.3.3 ) contains an unauthenticated stored XSS vulnerability. The root cause is that the plugin fails to restrict extra HTML it adds to WordPress's allowed elements to their specific intended contexts, applying a relaxed list to all sanitizati...
CVE-2026-85678
The AI Builder WordPress plugin (versions 2.4.1-2.7.7 ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to sanitize custom JavaScript saved against a post before it is echoed inside a script tag on the front end. This allows users with contributor-level a...
CVE-2026-86780
The Featured Image with URL WordPress plugin (versions before 1.0.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly sanitise and escape a stored image attribute value before outputting it. This allows users with a role as low as Contribu...
CVE-2026-86779
The Visualizer WordPress plugin (versions before 4.0.6 ) contains an authorization vulnerability in its chart-deletion requests. The plugin performs a site-wide capability check but fails to verify per-object ownership . This allows users with the Contributor role and above to permanently delete ...
WordPress Featured Image with URL plugin < 1.0.6 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Artus KG in WordPress Plugin Featured Image with URL versions 1.0.6...