15920 matches found
EUVD-2026-52594
The Brizy WordPress plugin before 2.8.19 does not sanitize or escape featured-image focal-point coordinates submitted through one of its AJAX actions before storing them and later echoing them into HTML attributes in the post editor's Featured Image meta box, allowing users with the Contributor...
EUVD-2026-52595
The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to...
EUVD-2026-52596
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is...
EUVD-2026-52588
The Visualizer WordPress plugin before 4.0.6 does not restrict a user-supplied URL to safe address ranges before fetching it server-side, allowing users with Contributor-level access and above to perform Server-Side Request Forgery against link-local instance-metadata endpoints. As the fetched...
EUVD-2026-52585
The Quiz and Survey Master QSM WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML attribute, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the browser of any user viewing th...
CVE-2026-16293
CVE-2026-16293 affects the Blubrry PowerPress WordPress plugin prior to version 11.16.11. The issue is a Stored XSS in Podcast Episode settings due to insufficient sanitisation/escaping, allowing low-privilege users (Contributor) to inject scripts even when unfiltered_html is disallowed. Vulnerab...
CVE-2026-16070
Brizy WordPress plugin prior to 2.8.19 is affected by an authorization issue (IDOR) in template-type updates. The plugin does not properly verify authorization on the object being modified, validating a request parameter different from the one used in the write operation, enabling users with Cont...
CVE-2026-14939
CVE-2026-14939 affects the Visualizer: Tables and Charts Manager WordPress plugin, vulnerable before version 4.0.6. The issue arises because a user-supplied URL is not restricted to safe address ranges when fetched server-side, enabling a Contributor+ user to perform a server-side request forgery...
CVE-2026-14824
The affected software is the Quiz And Survey Master WordPress plugin, versions before 11.2.2. The vulnerability is a Stored XSS in a question setting that is output into an unquoted HTML attribute, allowing users with contributor-level access and above to inject arbitrary JavaScript executed in t...
CVE-2026-15231
The CVE-2026-15231 entry affects the WordPress plugin “Tag, Category, and Taxonomy Manager” (TaxoPress) prior to version 3.51.0. Root cause: the plugin fails to verify a user’s authorization to access the referenced post before processing it and returning derived data. Impact: users with contribu...
EUVD-2026-52161
The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user result scoping fails open for non-staff users, allowing users with the Contributor role and above to disclose all customers'...
CVE-2026-15254 Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode
The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user result scoping fails open for non-staff users, allowing users with the Contributor role and above to disclose all customers'...
EUVD-2026-52163
The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...
EUVD-2026-52164
The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers...
CVE-2026-16274
CVE-2026-16274 concerns the Classified Listing WordPress plugin, versions before 5.4.4. The issue arises from a missing capability/ownership check on an AJAX action that returns a post’s content. This allows users with contributor-level access and above to read content from any post, page, or cus...
CVE-2026-16276
The Classified Listing WordPress plugin (before 5.4.4) does not perform a capability check on an AJAX action that returns aggregated store revenue totals (rtcl_revenue_order_search), allowing users with contributor-level access and above to read daily revenue figures normally restricted to admini...
CVE-2026-15254
The issue affects the Simply Schedule Appointments WordPress plugin prior to version 1.6.12.11. A missing capability check on an administrative appointment-listing shortcode, combined with per-user result scoping that fails open, allows users with the Contributor role and above to disclose all cu...
WordPress Core <6.5.2 - Cross-Site Scripting
WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. id: CVE-2024-4439 info: name: WordPress Core 6.5.2 - Cross-Site Scripting author: nqdung2002 severity: hi...
Meta Box <= 5.11.1 - Arbitrary File Deletion
The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxdeletefile function. This makes it possible for authenticated attackers with Contributor-level access and above to delete arbitrary files on the server. id: CVE-2026-3946...
CVE-2026-12231
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ exadinfoboximage’ parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...