CVE-2026-14860

CVE-2026-14860 affects the Podcast Player WordPress plugin up to version 8.3.0. The root cause is failure to validate the destination of a server-side request constructed from user input, enabling unauthenticated attackers to trigger requests to arbitrary hosts and read responses that parse as RS...

CVE-2026-14941

The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerc...

CVE-2026-15238

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account Subscriber and above to modify or overwrite the personal data of any customer by supplying an arbitrary...

CVE-2026-14206

The CVE-2026-14206 entry concerns the HT Contact Form WordPress plugin prior to version 2.9.3. It discloses that an endpoint which returns a saved form draft does not perform any authorization checks, allowing unauthenticated users to read stored personal data (name, email, phone, address) in dra...

CVE-2026-13170

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-13600

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

CVE-2026-12971

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery...

EUVD-2026-55023

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

EUVD-2026-55021

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

EUVD-2026-55022

The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task. On server configurations where the scheduled task executes before the HTTP...

CVE-2026-13600

CVE-2026-13600 (AutoNetTV Relay) affects the AutoNetTV Relay WordPress plugin before 3.0.14. The issue occurs in the scheduled content-synchronization task where no capability or authentication check is performed before setting the WordPress administrator authentication cookie. In server environm...

CVE-2026-17018

The CVE-2026-17018 issue affects the CubeWP Framework WordPress plugin (

CVE-2026-17010

The CVE-2026-17010 entry covers a stored XSS vulnerability in the Saitama Addon Pack WordPress plugin (versions up to 1.0.8). The issue arises because post metadata values are not properly sanitised or escaped before output, enabling users with contributor-level access and above to inject payload...

EUVD-2026-55025

The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST API endpoints, allowing users with the Contributor role and above to read arbitrary post metadata including that of...

CVE-2026-17010

The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with contributor-level access and above to inject stored Cross-Site Scripting payloads that execute in the browser of a higher-privileged user who...

CVE-2026-17010 Saitama Addon Pack <= 1.0.8 - Contributor+ Stored XSS via Post Meta

The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with contributor-level access and above to inject stored Cross-Site Scripting payloads that execute in the browser of a higher-privileged user who...

CVE-2026-18470

The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to obtain registered users' email addresses, including...

EUVD-2026-55031

The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and the per-source attempt counter on client-controlled data, allowing unauthenticated attackers to reset the limit at will...

CVE-2026-18470

The CVE concerns the Login & Register Forms WordPress plugin, affected in versions before 4.0.2. The vulnerability arises because password reset requests aren’t verified as coming from the account owner and the password-reset response does not redact the address properly, allowing unauthenticated...

CVE-2026-18666

The CVE concerns the Library Management System WordPress plugin operating on WordPress. Versions before 3.6.7 allow a low-privilege user (Subscriber) to trigger SQL injection via an unsafely handled user-supplied parameter used in a SQL statement, enabling extraction of arbitrary data from the da...