24346 matches found
CVE-2026-24610 WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in MetForm Pro = 3.9.1 versions...
CVE-2026-24610 WordPress MetForm Pro plugin <= 3.9.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in MetForm Pro = 3.9.1 versions...
CVE-2026-22332 WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in Tutor LMS Pro = 3.9.6 versions...
CVE-2026-22332 WordPress Tutor LMS Pro plugin <= 3.9.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in Tutor LMS Pro = 3.9.6 versions...
CVE-2026-22332
CVE-2026-22332 covers an unauthenticated SQL injection in WordPress Tutor LMS Pro plugin versions up to 3.9.6. The CVE entry and Patchstack reference document this vulnerability (including a CVSS v3.1 base score of 9.3, CRITICAL) affecting Tutor LMS Pro <=3.9.6, with exploitation status not pr...
CVE-2025-60223 WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...
CVE-2025-60223 WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...
CVE-2025-60223
CVE-2025-60223 affects the WordPress plugin WPBot Pro Wordpress Chatbot (versions
PT-2026-50296
Unauthenticated Broken Access Control in MetForm Pro = 3.9.1 versions...
CVE-2026-39596: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Blocksy Companion Pro 2.1.29 versions...
CVE-2026-25470: Improper Control of Generation of Code
Unauthenticated Remote Code Execution RCE in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.47 versions...
CVE-2026-40783: Improper Control of Generation of Code
Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.37 versions...
PT-2026-50332
Unauthenticated Privilege Escalation in LoginPress Pro = 6.2.2 versions...
PT-2026-50344
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms = 1.4.5 versions...
CVE-2026-24610: Missing Authorization
Subscriber Broken Access Control in MetForm Pro = 3.9.1 versions...
CVE-2025-60223: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...
PT-2026-50327
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
PT-2026-50276
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...