233279 matches found
CVE-2026-66707 WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...
CVE-2026-66706 WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66705
CVE-2026-66705: Unauthenticated Cross Site Scripting (XSS) in the WordPress plugin Facebook for WordPress, affecting version
CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-66702 WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Rank Math SEO = 1.0.274.1 versions...
CVE-2026-66703
CVE-2026-66703 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress MailOptin plugin versions
CVE-2026-66703 WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...
CVE-2026-66702
CVE-2026-66702 affects the WordPress Rank Math SEO plugin up to version 1.0.274.1 and is described as an unauthenticated Cross Site Scripting (XSS) vulnerability. The connected documents confirm the vulnerability exists in Rank Math SEO
CVE-2026-66701
CVE-2026-66701 affects the WordPress Profile Builder plugin (versions
CVE-2026-66699 WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability
Custom role Broken Access Control in Dokan = 5.0.10 versions...
EUVD-2026-53904
Custom role Broken Access Control in Dokan = 5.0.10 versions...
CVE-2026-66699
CVE-2026-66699 concerns WordPress Dokan plugin (versions
CVE-2026-66696 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability
Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...
CVE-2026-66695
The CVE-2026-66695 entry describes an Unauthenticated Path Traversal in the WordPress W3 Total Cache plugin, affecting versions <= 2.10.2. The vulnerability is active across plugin components implementing file/path access, with CVSS 3.1 base metrics indicating NETWORK attack vector, no user in...
CVE-2026-66692 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-66692 WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Insecure Direct Object References (IDOR) vulnerability
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-66692
CVE-2026-66692 affects the WordPress Colissimo Officiel: Méthodes de livraison pour WooCommerce plugin (≤ 2.10.0). The issue is an insecure direct object reference (IDOR) in delivery methods. According to the available sources, the vulnerability is rated CVSS 3.1 base score 4.3 (Network, Privileg...
CVE-2026-66694
The CVE-2026-66694 entry concerns an Unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Thrive Architect plugin (versions up to and including 10.9.3.1). The connected documents consistently describe a client-side/server-side XSS condition in Thrive Architect, without...