24356 matches found
CVE-2025-60223: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...
PT-2026-50327
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
CVE-2026-49778: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WPFunnels Pro = 2.9.4 versions...
CVE-2026-49058: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in LoginPress Pro = 6.2.2 versions...
PT-2026-50313
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
CVE-2026-22332: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Tutor LMS Pro = 3.9.6 versions...
PT-2026-50403
Unauthenticated Cross Site Scripting XSS in Royal Elementor Addons Pro 1.7.1041 versions...
CVE-2026-40724: Improper Limitation of a Pathname to a Restricted Directory
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
CVE-2026-42629: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in PowerPack Pro for Elementor v2.13.0 versions...
CVE-2026-40720: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Royal Elementor Addons Pro 1.7.1041 versions...
CVE-2026-52705: Unrestricted Upload of File with Dangerous Type
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms = 1.4.5 versions...
CVE-2026-39598: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2...
CVE-2026-24611: Missing Authorization
Unauthenticated Broken Access Control in MetForm Pro = 3.9.1 versions...
CVE-2026-40721: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Element Pack Pro = 9.0.6 versions...
CVE-2026-42385: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Profile Builder Pro = 3.15.0 versions...
PT-2026-50311
Contributor Local File Inclusion in Element Pack Pro = 9.0.6 versions...
PT-2026-50295
Subscriber Broken Access Control in MetForm Pro = 3.9.1 versions...
PT-2026-50341
Unauthenticated Cross Site Scripting XSS in WPFunnels Pro = 2.9.4 versions...