22273 matches found
CVE-2026-32564
CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...
EUVD-2026-66990
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32479 WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...
EUVD-2026-66988
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...
CVE-2026-81273: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in FluentBooking Pro = 2.2.4 versions...
CVE-2026-32566: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-78276: Deserialization of Untrusted Data
Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78275: Improper Limitation of a Pathname to a Restricted Directory
Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...
PT-2026-82442
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...
PT-2026-82444
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
PT-2026-82457
Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...
PT-2026-82469
Editor Broken Access Control in FluentPlayer Pro = 1.3.2 versions...
CVE-2026-32564: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32479: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.17 versions...
CVE-2026-78271: Incorrect Privilege Assignment
Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...
PT-2026-82458
Editor PHP Object Injection in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78274: Unrestricted Upload of File with Dangerous Type
Editor Arbitrary File Upload in Fluent Boards Pro = 2.0.11 versions...
PT-2026-82445
Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions prior to 2.0.64 Description An unauthenticated privilege escalation issue allows an attacker to create a WordPress administrator account. This flaw has been exploited in the wild via t...