22277 matches found
CVE-2026-68566: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-74001: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-68564: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-66682: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-32475
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
EUVD-2026-62595
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
CVE-2026-32475
Elementor Pro WordPress plugin (≈6,000,000 active installations) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 4.2.1 . The root cause is a logic error in the Upload::validation() function where return is used instead of continue when the first array el...
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
CVE-2026-32475 WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1...
WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Tin Pham aka TF1T in WordPress Plugin Elementor Pro versions = 4.2.1...
CVE-2026-74804
creationtimestamp| type| source ---|---|--- 2026-08-19 14:04:01+00:00| seen| https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2kahc2s 2026-08-19 14:04:02+00:00| seen| https://bsky.app/profile/yootheme.bsky.social/post/3mtgvj2lbns2s 2026-08-19 16:08:24+00:00| seen|...
CVE-2026-73183
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73182
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
EUVD-2026-62378
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183 WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-73183
Maps Marker Pro (WordPress plugin) versions ≤ 4.32 contain an unauthenticated SQL injection vulnerability, allowing remote attackers with no credentials to read sensitive data and potentially affect availability. CVSS 3.1 scores it 9.3 Critical (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L). Patchstack ha...
EUVD-2026-62377
Unauthenticated Cross Site Scripting XSS in BBQ Pro = 3.9 versions...
CVE-2026-73182
Unauthenticated reflected XSS affects BBQ Pro plugin (WordPress) up to version 3.9, rated CVSS 7.1 (HIGH). No exploitation or patch details are provided; CISA SSVC assesses partial technical impact. Upgrade to a version newer than 3.9 once available and monitor Patchstack advisories. Exploitation...