22271 matches found
CVE-2026-66649
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66586
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
EUVD-2026-63314
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-74001
User Registration & Membership Pro is a WordPress plugin affected by an unauthenticated broken authentication vulnerability in versions ≤ 5.4.5 , enabling account takeover without any prior credentials. The flaw was discovered by 0xd4rk5id3 and carries a CVSS 3.1 score of 9.8 (CRITICAL) with a ne...
CVE-2026-74001 WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
CVE-2026-68566 WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
EUVD-2026-63308
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
CVE-2026-68564
CVE-2026-68564 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin NotificationX Pro , affecting versions ≤ 3.1.4 . The flaw allows an attacker to inject malicious scripts without prior authentication, though user interaction is required (per the CVSS vector). T...
CVE-2026-68564 WordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
EUVD-2026-63307
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-66682
CVE-2026-66682 is an unauthenticated privilege escalation vulnerability in the Abandoned Cart Pro for WooCommerce WordPress plugin, affecting versions
CVE-2026-66682 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-66682 WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-66649 WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66649 WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66649
The WordPress Directory Pro plugin (versions ≤ 2.5.8) has an unauthenticated SQL injection vulnerability exploitable over the network with low complexity, scoring 9.3 critical. Patchstack advises upgrading to a patched version; no in-the-wild exploitation details are provided in the documents.
EUVD-2026-63302
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
EUVD-2026-63333
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66586
WordPress WP Cafe Pro plugin (versions below 3.0.15) has a Local File Inclusion vulnerability, discovered by Ananda Dhakal of Patchstack. An authenticated author with high privileges can exploit it over the network to read sensitive server files, potentially compromising confidentiality, integrit...