92234 matches found
CVE-2026-56010: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Abandoned Cart Pro for WooCommerce = 10.4.0 versions...
CVE-2026-56008: Incorrect Privilege Assignment
Contributor Privilege Escalation in Fusion Builder = 3.15.4 versions...
CVE-2026-56011: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in MapPress Maps for WordPress = 2.97.3 versions...
CVE-2026-54847: Missing Authorization
Unauthenticated Broken Access Control in Stylish Cost Calculator = 8.3.9 versions...
CVE-2026-54840: Missing Authorization
Unauthenticated Broken Access Control in Newsletters = 4.13 versions...
CVE-2026-54837: Missing Authorization
Unauthenticated Broken Access Control in Intranet & Private Site – All-In-One Intranet = 1.8.1 versions...
CVE-2026-54839: Authorization Bypass Through User-Controlled Key
Unauthenticated Sensitive Data Exposure in Trinity Backup – Backup, Migrate, Restore, Clone & Schedule Backups = 2.0.9 versions...
CVE-2026-54832: Missing Authorization
Unauthenticated Broken Access Control in Gutenverse Companion = 2.5.0 versions...
CVE-2026-54831: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in GeoDirectory = 2.8.162 versions...
CVE-2026-54827: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Real Estate 7 = 3.5.9 versions...
CVE-2026-54826: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in SupportCandy = 3.4.6 versions...
CVE-2026-54824: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Ads by WPQuads = 3.0.3 versions...
CVE-2026-54820: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in JetBooking = 4.0.4.1 versions...
CVE-2026-54835: Missing Authorization
Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...
CVE-2025-68063: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey = 4.4.3 versions...
CVE-2025-66123: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in BookPro = 1.1.0 versions...
CVE-2025-64637: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Unauthenticated Content Injection in Auros Core = 5.3.1 versions...
CVE-2025-64636: Missing Authorization
Unauthenticated Broken Access Control in Donation Thermometer = 2.2.7 versions...