19113 matches found
CVE-2026-65487 WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Photography = 7.7.6 versions...
EUVD-2026-48081
Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...
CVE-2026-65462 WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
EUVD-2026-48207
Unauthenticated SQL Injection in Bookly = 27.7 versions...
EUVD-2026-48180
Unauthenticated Cross Site Scripting XSS in Grand Photography = 5.7.8 versions...
CVE-2026-57769 WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Grand Photography = 5.7.8 versions...
CVE-2026-57735 WordPress Breakdance plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Breakdance = 2.7.1 versions...
CVE-2026-57716
CVE-2026-57716 affects the WordPress plugin WordPress Broadcast Live Video (VideoWhisper Live Streaming Integration)
EUVD-2026-48176
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
EUVD-2025-210505
Administrator Cross Site Scripting XSS in WP-Polls = 2.77.3 versions...
RHSA-2026:42080 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
Bulletin has no description...
EUVD-2026-47900
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 7.0.4 via the wpdmppdl parameter. This is due to the download function — hooked to the unauthenticated WordPress wp action — decoding the...
CVE-2026-15906 Premium Packages <= 7.0.4 - Authenticated (Admin+) SQL Injection via 'orderby' Parameter
The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...
CVE-2026-12421
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme <= 7.5.4 - Cross Site Scripting (XSS) vulnerability
WordPress Manual - Documentation, Knowledge Base & Education WordPress Theme theme = 7.5.4 - Cross Site Scripting XSS vulnerability discovered by ed32.dll in WordPress Theme Manual - Documentation, Knowledge Base & Education WordPress Theme versions = 7.5.4...
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme <= 7.5.4 - Broken Access Control vulnerability
WordPress Manual - Documentation, Knowledge Base & Education WordPress theme theme = 7.5.4 - Broken Access Control vulnerability discovered by ed32.dll in WordPress Theme Manual - Documentation, Knowledge Base & Education WordPress Theme versions = 7.5.4...
CVE-2026-12421 ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values
The ARforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'password' Field Values in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
[SECURITY] Fedora 43 Update: kernel-7.1.4-104.fc43
The kernel meta package...
