EUVD-2026-2978

The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /aioseo/v1/ai/credits REST route in all versions up to, and including, 4.9.2. This makes it possible for...

EUVD-2026-2972

The MailerLite - WooCommerce integration plugin for WordPress is vulnerable to unauthorized data modification and deletion in all versions up to, and including, 3.1.3. This is due to missing capability checks on the resetIntegration function. This makes it possible for authenticated attackers, wi...

EUVD-2026-2982

The Shield: Blocks Bots, Protects Users, and Prevents Security Breaches plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 21.0.9 via the MfaGoogleAuthToggle class due to missing validation on a user controlled key. This makes it possible...

EUVD-2026-2970

The Awesome Support - WordPress HelpDesk & Support Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in all versions up to, and including, 6.3.6. This is due to the 'wpasdomractivateuser' function not verifying that a user has permission to modify other...

EUVD-2026-2983

Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

EUVD-2026-2986

Police Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing Unauthenticated remote attacker to exploit Absolute Path Traversal to download arbitrary system files...

EUVD-2026-2999

EUVD-2026-2999...

EUVD-2026-3010

EUVD-2026-3010...

EUVD-2026-3031

EUVD-2026-3031...

EUVD-2026-3002

EUVD-2026-3002...

EUVD-2026-3025

EUVD-2026-3025...

EUVD-2026-3013

EUVD-2026-3013...

EUVD-2026-3020

EUVD-2026-3020...

EUVD-2026-3000

EUVD-2026-3000...

EUVD-2026-3018

EUVD-2026-3018...

EUVD-2026-3037

EUVD-2026-3037...

EUVD-2026-3043

EUVD-2026-3043...

EUVD-2026-3036

EUVD-2026-3036...

EUVD-2026-3044

EUVD-2026-3044...

EUVD-2026-2992

The vulnerability, if exploited, could allow an authenticated miscreant Process Optimization Designer User to embed OLE objects into graphics, and escalate their privileges to the identity of a victim user who subsequently interacts with the graphical elements...