24270 matches found
CVE-2026-56010
CVE-2026-56010 affects the WordPress plugin Abandoned Cart Pro for WooCommerce (versions
EUVD-2026-39686
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-56010 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-56010 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
WordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerability
WordPress Paid Memberships Pro - Add Member From Admin plugin = 0.7.2 - Cross Site Request Forgery CSRF vulnerability discovered by Roll in WordPress Plugin Paid Memberships Pro - Add Member From Admin versions = 0.7.2...
WordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Austin Ginder in WordPress Plugin Blocksy Companion Pro versions = 2.1.46...
WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by daroo in WordPress Plugin Blocksy Companion Pro versions = 2.1.45...
PT-2026-52829
Name of the Vulnerable Software and Affected Versions Paid Memberships Pro - Add Member From Admin versions prior to 0.7.3 Description An unauthenticated Cross Site Request Forgery CSRF exists, which allows attackers to execute unauthorized actions via crafted requests. CSRF is a type of attack...
PT-2026-52792
Contributor Broken Access Control in SEOPress PRO = 9.1.1 versions...
PT-2026-52796
Contributor Cross Site Scripting XSS in Neve PRO = 3.1.2 versions...
CVE-2026-56010: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-57630: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in Blocksy Companion Pro = 2.1.46 versions...
CVE-2026-57315: Improper Control of Generation of Code
Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.45 versions...
PT-2026-52782
Contributor Remote Code Execution RCE in Blocksy Companion Pro = 2.1.45 versions...
PT-2026-52740
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-56057: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Uncanny Automator Pro = 7.3.0.6 versions...
PT-2026-52795
Contributor Cross Site Scripting XSS in SeedProd Pro 6.19.5 versions...
PT-2026-52764
Subscriber PHP Object Injection in Uncanny Automator Pro = 7.3.0.6 versions...
PT-2026-52801
Name of the Vulnerable Software and Affected Versions Blocksy Companion Pro versions prior to 2.1.47 Description An Insecure Direct Object Reference IDOR exists due to missing validation on a user-controlled key. This allows unauthenticated attackers to perform unauthorized actions. IDOR is a typ...