232024 matches found
EUVD-2026-53904
Custom role Broken Access Control in Dokan = 5.0.10 versions...
CVE-2026-66699
CVE-2026-66699 concerns WordPress Dokan plugin (versions
CVE-2026-66695
The CVE-2026-66695 entry describes an Unauthenticated Path Traversal in the WordPress W3 Total Cache plugin, affecting versions <= 2.10.2. The vulnerability is active across plugin components implementing file/path access, with CVSS 3.1 base metrics indicating NETWORK attack vector, no user in...
CVE-2026-66692 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-66694
The CVE-2026-66694 entry concerns an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Thrive Architect plugin (versions up to and including 10.9.3.1). The connected documents consistently describe a client-side/server-side XSS condition in Thrive Architect, without...
CVE-2026-66692
CVE-2026-66692 affects the WordPress Colissimo Officiel: Méthodes de livraison pour WooCommerce plugin (≤ 2.10.0). The issue is an insecure direct object reference (IDOR) in delivery methods. According to the available sources, the vulnerability is rated CVSS 3.1 base score 4.3 (Network, Privileg...
CVE-2026-66692 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
EUVD-2026-53899
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.5 versions...
CVE-2026-66688 WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...
CVE-2026-66688
The CVE-2026-66688 entry concerns a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress plugin Ultimate Addons for Elementor , affected in versions
CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-66685
The connected documents identify a vulnerability in the WordPress Featured Video Plus plugin, affected versions
CVE-2026-66683
CVE-2026-66683 corresponds to an unauthenticated sensitive data exposure in the WordPress plugin “Custom CSS and JavaScript”, affecting versions up to and including 2.0.16. The vulnerability details indicate the issue exists in affected builds and results in exposure of sensitive data without aut...
CVE-2026-66683 WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...
CVE-2026-66684
The CVE-2026-66684 entry concerns the WordPress plugin Export Import Menus, affected versions ≤ 1.9.2. The vulnerability is an unauthenticated sensitive data exposure in the export/import functionality. No concrete exploit details, affected files, root cause, or remediation are provided in the av...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66665 WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...
CVE-2026-66665
The vulnerability affects the WordPress Type Hub plugin ≤ 2.0.6, with an Unauthenticated Arbitrary File Upload . The root cause is not explicitly stated in the provided documents. Impact is described as critical (CVSSv3.1: 10.0, Network, No auth, Privileges none, Scope Changed, C/I/A HIGH). Explo...