Lucene search
+L

20206 matches found

Cvelist
Cvelist
added 2026/06/05 6:31 p.m.35 views

CVE-2026-5415 WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

The WP Captcha PRO the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajaxruntool AJAX handler relying solely on a nonce check...

8.8CVSS0.00393EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/06/05 6:31 p.m.8 views

CVE-2026-5415

The WP Captcha PRO the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajaxruntool AJAX handler relying solely on a nonce check...

8.8CVSS5.7AI score0.00393EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/06/05 6:31 p.m.10 views

CVE-2026-5415 WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link

The WP Captcha PRO the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.38. This is due to the ajaxruntool AJAX handler relying solely on a nonce check...

8.8CVSS5.7AI score0.00393EPSS
SaveExploits1References2
CVE
CVE
added 2026/06/05 6:31 p.m.53 views

CVE-2026-5415

The CVE-2026-5415 issue affects the WP Captcha PRO plugin for WordPress (

8.8CVSS5.7AI score0.00393EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2026/06/05 2:19 p.m.242 views

Exploit for CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross...

9.8CVSS6.5AI score0.40992EPSS
SaveExploits1
NVD
NVD
added 2026/06/05 9:16 a.m.16 views

CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

10CVSS0.01656EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2026/06/05 8:59 a.m.15 views

CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

10CVSS5.4AI score0.01656EPSS
SaveExploits3References1
EUVD
EUVD
added 2026/06/05 8:59 a.m.12 views

EUVD-2026-34792

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.3. No patched version is available - the vendor has applied a fi...

10CVSS5.5AI score0.01656EPSS
SaveExploits3References1
CVE
CVE
added 2026/06/05 8:59 a.m.69 views

CVE-2026-49777

CVE-2026-49777 (WordPress Product Slider Pro for WooCommerce

10CVSS5.4AI score0.01656EPSS
SaveIn wildExploits3References1
ATTACKERKB
ATTACKERKB
added 2026/06/05 8:59 a.m.11 views

CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

10CVSS5.4AI score0.01656EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2026/06/05 8:59 a.m.55 views

CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

10CVSS0.01656EPSS
SaveExploits3References1
The Hacker News
The Hacker News
added 2026/06/05 8:38 a.m.20 views

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 CVSS score: 9.8, a remote code execution...

9.8CVSS6.9AI score0.40992EPSS
SaveExploits1
VulnCheck KEV
VulnCheck KEV
added 2026/06/05 12:0 a.m.20 views

VulnCheck KEV: CVE-2026-49777

Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4...

10CVSS5.4AI score0.01656EPSS
SaveIn wildExploits3References3
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.22 views

PT-2026-47032

Name of the Vulnerable Software and Affected Versions WP Captcha PRO versions prior to 5.39 Description The plugin is susceptible to arbitrary file upload, which can lead to remote code execution. The issue stems from a flawed capability check in the save ajax function within the licensing module...

8.8CVSS5.9AI score0.00449EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.17 views

PT-2026-46911

Name of the Vulnerable Software and Affected Versions Product Slider Pro for WooCommerce versions prior to 3.5.4 Description Improper validation of input parameters related to specified quantities allows unauthenticated remote attackers to implant malicious software and execute arbitrary commands...

10CVSS6.4AI score0.01656EPSS
SaveExploits3References9
CNNVD
CNNVD
added 2026/06/05 12:0 a.m.13 views

WordPress plugin WP Captcha PRO 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS6.2AI score0.00449EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/05 12:0 a.m.14 views

WordPress plugin Product Slider Pro for WooCommerce 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

10CVSS5.4AI score0.01656EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.21 views

PT-2026-47033

Name of the Vulnerable Software and Affected Versions WP Captcha PRO versions prior to 5.39 Description An authentication bypass exists due to the ajax run tool AJAX handler relying only on a nonce check via check ajax referer without performing capability checks. This is combined with the create...

8.8CVSS5.7AI score0.00393EPSS
SaveExploits1References8
GithubExploit
GithubExploit
added 2026/06/04 4:22 p.m.115 views

Exploit for CVE-2026-8732

CVE-2026-8732 – WordPress WP Maps Pro Exploit Unauthenticat...

9.8CVSS6AI score0.19272EPSS
SaveExploits7
Patchstack
Patchstack
added 2026/06/04 12:46 p.m.12 views

WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin WPFunnels Pro versions = 2.9.4...

7.1CVSS5.5AI score0.00186EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder