CVE-2026-42713

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

CVE-2026-42713 WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

EUVD-2026-94287

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

CVE-2026-42713 WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

CVE-2026-42713

The Gopiplus Post title marquee scroll WordPress plugin (versions n/a through 9.9 ) is vulnerable to a Blind SQL Injection flaw. This issue is caused by the improper neutralization of special elements used in an SQL command. Successful exploitation allows an attacker to perform unauthorized datab...

WordPress Post title marquee scroll plugin <= 9.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Post title marquee scroll versions = 9.9...

PT-2026-107476

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL Injection.This issue affects Post title marquee scroll: from n/a through 9.9...

CVE-2025-54352

PoC CVE-2025-54352 Utilizzo Passaggi per installare e testare il PoC per WordPress: 1. Installare una versione fresca di WordPress usando Docker: 1.1 Avviare il container del database MySQL: docker run --name wp-db -e MYSQLDATABASE=wp-db -e MYSQLUSER=wpuser -e MYSQLPASSWORD=password -e...

CVE-2025-66024

CVE-2025-66024: Startseite der XWiki-Blog-Anwendung anfällig für gespeichertes XSS über den Beitragstitel Übersicht Feld| Details ---|--- CVE-ID| CVE-2025-66024 Schweregrad| HOCH Sicherheitshinweis| Sicherheitshinweis anzeigen Entdeckt von| Lukasz Rybak Betroffene Produkte...

CVE-2026-96526 MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users'...

CVE-2026-96526 MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route

The MCP Server for WordPress WordPress plugin before 1.8.2 does not perform an object-level authorization check on one of its workflow REST routes, allowing users with the Contributor role to disclose the title and publication status of any post, page or custom post type, including other users'...

WordPress MCP Server for WordPress plugin < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure vulnerability

Contributor+ Arbitrary Post Title Disclosure vulnerability discovered by Raphael P. Cigana in WordPress Plugin MCP Server for WordPress versions 1.8.2...

PT-2026-95340

Name of the Vulnerable Software and Affected Versions Popup Maker versions prior to 1.25.0 Description The Popup Maker plugin for WordPress contains a Stored Cross-Site Scripting issue caused by insufficient input sanitization and output escaping. Authenticated attackers with contributor-level...

WordPress Active Woot Products Tables for WooCommerce. 100% FREE plugin 2.1.2 - Subscriber+ Arbitrary Post Title Modification vulnerability

Subscriber+ Arbitrary Post Title Modification vulnerability discovered by JunHee CHO in WordPress Plugin Active Products Tables for WooCommerce versions 2.1.2...

CVE-2026-91009

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin (versions before 2.1.3 ) is vulnerable to unauthorized actions due to missing authorisation and CSRF checks in specific AJAX actions. This flaw allows any authenticated user, such as a subscriber , to modify the titles of...

CVE-2026-91009 Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products...

CVE-2026-91009 Active Products Tables for WooCommerce < 2.1.3 - Subscriber+ Arbitrary Post Title Modification via woot_update_attachment

The Active Woot Products Tables for WooCommerce. 100% FREE WordPress plugin before 2.1.3 does not have authorisation and CSRF checks in some of its AJAX actions, allowing any authenticated users, such as subscriber, to change the title of arbitrary posts, pages and products...

CVE-2026-19719

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

WordPress Rank Math SEO plugin < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite vulnerability

Author+ Term Metadata Update and Cross-Object Post Title Overwrite vulnerability discovered by Mohammed Abd Alrahman in WordPress Plugin Rank Math SEO versions 1.0.277...

CVE-2026-77787 Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit...