716 matches found
CVE-2026-85348
The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link...
CVE-2026-42637
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-39798
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
EUVD-2026-93059
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-42637
The PayPlug for WooCommerce (Official) WordPress plugin versions
CVE-2026-42637 WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
EUVD-2026-93042
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
CVE-2026-39798
The WordPress TrueBooker plugin versions
CVE-2026-39798 WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
PT-2026-106481
Unauthenticated Settings Change in PayPlug for WooCommerce Official = 3.1.0 versions...
PT-2026-106464
Unauthenticated Settings Change in TrueBooker = 1.2.9 versions...
WordPress TrueBooker plugin <= 1.2.9 - Settings Change vulnerability
Settings Change vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin TrueBooker versions = 1.2.9...
WordPress PayPlug for WooCommerce (Official) plugin <= 3.1.0 - Settings Change vulnerability
Settings Change vulnerability discovered by Filip Kecman in WordPress Plugin PayPlug for WooCommerce Official versions = 3.1.0...
WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability
Settings Change vulnerability discovered by Mor Golan in WordPress Plugin 워드프레스 결제 심플페이 versions = 5.5.17...
CVE-2026-85576
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...
EUVD-2026-89630
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...
PT-2026-103031
The All in One Files Upload WordPress plugin before 2.0.17 does not have any capability check, and does not verify the authenticity of the request, when saving its settings, allowing any authenticated user, such as a subscriber, to change them...