Lucene search
+L

473618 matches found

EUVD
EUVD
added 2026/08/25 1:26 a.m.5 views

EUVD-2026-65194

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to generic SQL Injection via Stored 'metakey' via Event/Location Duplicate Action in all versions up to, and including, 7.4.0 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS6.1AI score
SaveExploits0References14
CVE
CVE
added 2026/08/25 1:26 a.m.13 views

CVE-2026-15023

The Events Manager WordPress plugin (versions up to and including 7.4.0 ) is vulnerable to a second-order SQL injection via the stored meta_key field in the Event/Location Duplicate action. An attacker with contributor-level or higher access plants SQL metacharacters into a custom meta key throug...

6.5CVSS6.1AI score
SaveExploits0References14
EUVD
EUVD
added 2026/08/25 12:30 a.m.9 views

EUVD-2026-65169

Unauthenticated PHP Object Injection in WP Project Manager = 4.0.6 versions...

9.8CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 12:30 a.m.6 views

EUVD-2026-65167

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

9.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 12:30 a.m.8 views

EUVD-2026-65162

Unauthenticated SQL Injection in Boost = 2.0.4 versions...

9.3CVSS5.9AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 12:30 a.m.7 views

EUVD-2026-65172

Unauthenticated PHP Object Injection in The Events Calendar = 6.17.2 versions...

9.8CVSS5.4AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 12:30 a.m.9 views

EUVD-2026-65161

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

9.3CVSS5.9AI score
SaveExploits0References2
NVD
NVD
added 2026/08/24 10:16 p.m.9 views

CVE-2026-32563

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

9.8CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 10:16 p.m.10 views

CVE-2026-32554

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

9.3CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 10:16 p.m.8 views

CVE-2026-32555

Unauthenticated SQL Injection in Boost = 2.0.4 versions...

9.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.12 views

CVE-2026-78282

CVE-2026-78282 affects the WordPress Stripe Payments plugin in versions

7.1CVSS4.9AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.18 views

CVE-2026-78265

The Events Calendar WordPress plugin versions

9.8CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.19 views

CVE-2026-78262

WP Project Manager (WordPress plugin by WeDevs ) is affected by an unauthenticated PHP Object Injection vulnerability in versions ≤ 4.0.6 . The flaw allows a remote, unauthenticated attacker over the network with low complexity and no user interaction to achieve high impact on confidentiality, in...

9.8CVSS5.3AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.13 views

CVE-2026-32563

CVE-2026-32563 is a PHP Object Injection vulnerability in the ACPT (Pro) – Custom Post Types Plugin for WordPress , affecting versions ≤ 2.0.63 . The vulnerability requires Subscriber -level access as stated in the description, though the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) rates Pr...

9.8CVSS5.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 9:31 p.m.16 views

CVE-2026-32563 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

9.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 9:31 p.m.16 views

CVE-2026-32556 WordPress Boost plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Boost = 2.0.4 versions...

7.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 9:31 p.m.16 views

CVE-2026-32554 WordPress WooBeWoo Product Filter Pro plugin <= 3.1.8 - SQL Injection vulnerability

Unauthenticated SQL Injection in WooBeWoo Product Filter Pro = 3.1.8 versions...

9.3CVSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 9:31 p.m.17 views

CVE-2026-32555 WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in Boost = 2.0.4 versions...

9.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.10 views

CVE-2026-32554

WooBeWoo Product Filter Pro (WordPress plugin) versions up to and including 3.1.8 are affected by an unauthenticated SQL injection vulnerability, rated CVSS 9.3 (CRITICAL) by Patchstack. The vulnerability is exploitable over the network with low complexity and no user interaction required, with a...

9.3CVSS5.7AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 9:31 p.m.11 views

CVE-2026-32555

CVE-2026-32555 is an unauthenticated SQL injection vulnerability in the WordPress Boost plugin , affecting versions 2.0.4 and earlier . The flaw allows a remote, unauthenticated attacker to exploit the injection over the network with low complexity and no user interaction , resulting in high conf...

9.3CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder