WordPress Media Library Assistant < 3.40 - SQL Injection

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role and above to perform SQL injection. id: CVE-2026-16959 info: name: WordPress Media...

EXPLOIT-CVE-2026-8832

EXPLOIT CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

CVE-2026-118043

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defeat directory-level access controls an...

CVE-2026-118043 Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defeat directory-level access controls an...

CVE-2026-118043

The Bulk Media Register WordPress plugin (versions before 2.01 ) is vulnerable to a path traversal flaw because it fails to properly validate user-supplied paths before moving files on the server. An attacker with the Author role can exploit this to move or rename arbitrary files, potentially rea...

EUVD-2026-114582

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defeat directory-level access controls an...

EXPLOIT-CVE-2026-8832-

EXPLOIT-CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...

CVE-2026-118043: Unknown Bulk Media Register: The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a…

The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defeat directory-level access controls an...

CVE-2026-118071

The Joinchat WordPress plugin (versions 6.3.2 - 6.4.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape the message of its button block before outputting it into an HTML attribute on the front end. This vulnerability allows users with the Author role or higher to inj...

EUVD-2026-112622

The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-110504 Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass

The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-106647

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifier that is exposed in public page sourc...

EUVD-2026-111705

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifier that is exposed in public page sourc...

CVE-2026-106647

The Royal Addons for Elementor WordPress plugin versions before 1.7.1070 contains a vulnerability where contact form email delivery configurations are not scoped to specific documents or owners. Instead, configurations are stored in a site-global namespace using a non-secret, author-chosen identi...

CVE-2026-106647 Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifier that is exposed in public page sourc...

PT-2026-127822

The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's email delivery configuration to the form's own document or owner, instead storing it in a site-global namespace keyed only on a non-secret, author-chosen identifier that is exposed in public page sourc...

CVE-2026-110510

The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow users with the author role and above to inject iframe and form elements into published pages...

PT-2026-121763

Name of the Vulnerable Software and Affected Versions Essential Addons for Elementor versions prior to 6.8.7 Description Certain widgets in the plugin fail to validate the HTML tag setting before using it to construct markup. This allows users with the author role or higher to inject iframe and...

CVE-2026-111972

The Photo Engine Media Organizer & Lightroom WordPress plugin before 6.5.8 does not verify that a user is authorised to act on the targeted media attachment, allowing authenticated users with the author role and above to delete arbitrary media attachments, including those uploaded by other users...

CVE-2026-111972

The Photo Engine (Media Organizer & Lightroom) WordPress plugin, in versions before 6.5.8 , contains an authorization bypass vulnerability. The plugin fails to verify if a user is authorized to act on a targeted media attachment. This allows authenticated users with the author role or higher to d...