91354 matches found
CVE-2026-74016: Unrestricted Upload of File with Dangerous Type
Subscriber Arbitrary File Upload in Smart Cleaning = 4.8.6 versions...
CVE-2026-74013: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in eShipper Commerce = 2.16.13 versions...
CVE-2026-73993: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in FundEngine = 1.7.9 versions...
CVE-2026-68566: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in BookingPress Appointment Booking Pro = 6.0.2 versions...
CVE-2026-66682: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-66680: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Locatoraid Store Locator = 3.9.72 versions...
CVE-2026-66673: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...
CVE-2026-66649: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
CVE-2026-66647: Missing Authorization
Subscriber Broken Access Control in Homlisti = 3.1.2 versions...
CVE-2026-66615: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Podlove Podcast Publisher = 4.5.4 versions...
CVE-2026-66614: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.2 versions...
CVE-2026-66612: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Aora = 1.3.19 versions...
CVE-2026-66609: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in TheGem Elementor = 5.12.3 versions...
CVE-2026-66607: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Advance Product Search = 1.4.8 versions...
CVE-2026-66600: Unrestricted Upload of File with Dangerous Type
Author Arbitrary File Upload in Media LIbrary Assistant = 3.39 versions...
CVE-2026-66598: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in B2BKing Premium = 5.6.07 versions...
CVE-2026-66597: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in wpDataTables = 6.5.1.4 versions...
CVE-2026-66586: Improper Control of Filename for Include/Require Statement in PHP Program
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...