610872 matches found
CVE-2026-82220 WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability
Unauthenticated Other Vulnerability Type in Forminator = 1.57.1 versions...
CVE-2026-81761 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81767 WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81767 WordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81767
CVE-2026-81767 affects the WordPress Simple Payment plugin in versions 2.5.2 and earlier , presenting an unauthenticated Broken Access Control flaw. The CVSS 3.1 base score is 7.5 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, indicating an attacker requires no credentials or user...
EUVD-2026-67733
Subscriber Broken Access Control in WpEvently = 5.5.0 versions...
EUVD-2026-67734
Unauthenticated Broken Access Control in Simple Payment = 2.5.2 versions...
CVE-2026-81761
WpEvently is a WordPress plugin affected by a Broken Access Control vulnerability in versions ≤ 5.5.0 . The flaw allows a Subscriber -level user to perform actions beyond their intended permissions, resulting in a low confidentiality impact with no integrity or availability loss. The CVSS 3.1 sco...
CVE-2026-81759 WordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81759
WpEvently is a WordPress plugin (by Mage EventPress) affected by a Broken Access Control vulnerability in versions
EUVD-2026-67731
Contributor Broken Access Control in WpEvently = 5.5.0 versions...
CVE-2026-81757
CVE-2026-81757 is a Remote Code Execution (RCE) vulnerability in the Rank Math SEO WordPress plugin, affecting versions ≤ 1.0.276 . The flaw is exploitable by users with Author -level permissions, meaning a low-privilege authenticated user can escalate to full code execution on the server. The CV...
EUVD-2026-67729
Subscriber Insecure Direct Object References IDOR in WP Job Portal = 2.5.9 versions...
EUVD-2026-67730
Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...
CVE-2026-81757 WordPress Rank Math SEO plugin <= 1.0.276 - Remote Code Execution (RCE) vulnerability
Author Remote Code Execution RCE in Rank Math SEO = 1.0.276 versions...
EUVD-2026-67727
Contributor Broken Access Control in ACF Extended = 0.9.2.6 versions...
CVE-2026-82227
CVE-2026-82227 is a SQL Injection vulnerability in the WordPress plugin WPBulky (WP Bulk Edit Post Types), affecting versions 1.2.2 and earlier . The flaw requires Contributor-level privileges to exploit. CVSS 3.1 scores it 8.5 (HIGH) , with a changed scope, high impact on confidentiality, and lo...
CVE-2026-81284
CVE-2026-81284 affects the WordPress plugin ACF Extended in versions
