92218 matches found
CVE-2026-59545: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in miniOrange Discord Integration = 2.2.4 versions...
CVE-2026-59544: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Thrive Quiz Builder = 10.9.3.0 versions...
CVE-2026-59542: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in Kali Forms = 2.4.18 versions...
CVE-2026-59541: Incorrect Privilege Assignment
Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...
CVE-2026-59540: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...
CVE-2026-59524: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Easy Digital Downloads = 3.6.7 versions...
CVE-2026-59526: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59522: Missing Authorization
Subscriber Broken Access Control in WP ERP = 1.17.5 versions...
CVE-2026-59517: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Easy Form Builder = 4.0.12 versions...
CVE-2026-59512: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Product Enquiry for WooCommerce = 2.2.34.43 versions...
CVE-2026-59525: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-57785: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in ApusListing = 1.2.63 versions...
CVE-2026-57784: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Ninja Forms File Uploads Extension = 3.3.26 versions...
CVE-2026-57735: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...
CVE-2026-57767: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Google Maps Pro = 10.1.02 versions...
CVE-2026-57717: Missing Authorization
Unauthenticated Broken Access Control in Knit Pay = 9.6.0.0 versions...
CVE-2026-57716: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
CVE-2026-57696: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...