282 matches found
CVE-2026-89050 Quads Ads Manager for Google AdSense < 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL
The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment...
CVE-2022-0439
CVE-2022-0439 CVE-2022-0439 - Email Subscribers & Newsletters 5.3.2 - Subscriber+ 盲SQL注入 必备条件 已安装 sqlmap，并拥有一个具备 subscriber+ 权限的有效用户名和密码 用法 root@kitploit: usage: CVE-2022-0439.py -h -w URL -u USERNAME -p PASSWORD options: -h, --help show this help message and exit -w URL, --url URL URL of the...
CVE-2025-1304
🚨 WordPress NewsBlogger 主题 = 0.2.5.1 - 任意文件上传 CVE-2025-1304 CVSS 评分： 8.8（高危） 漏洞类型： 任意文件上传 组件： WordPress 主题 CVE 编号： CVE-2025-1304 🔥 漏洞概述 WordPress NewsBlogger 主题（版本 = 0.2.5.1）存在一个通过管理员欢迎面板触发的 任意文件上传 漏洞。 该漏洞允许任何经过身份验证的用户——包括拥有最低 订阅者 角色的用户——上传包含 Web Shell 的恶意 .zip 压缩包。 上传过程通过一个未经验证的插件 URL...
CVE-2026-87888
The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin befor...
EUVD-2026-76801
The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin befor...
CVE-2026-87888 YayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST Route
The YayPricing WordPress plugin before 3.5.7 does not perform an authorization check on a REST route that saves its pricing rules, allowing users with the subscriber role and above to store JavaScript that executes in the browser of an administrator who opens the YayPricing WordPress plugin befor...
CVE-2026-87888
The YayPricing WordPress plugin before 3.5.7 is vulnerable to stored XSS caused by a missing authorization check on the save_page_data REST route that saves pricing rules. Users with the subscriber role or above can store malicious JavaScript that executes in the browser of an administrator who o...
CVE-2026-62132 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
EUVD-2026-76196
Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...
CVE-2026-62102
CVE-2026-62102 affects the WordPress Gato GraphQL plugin in versions 19.2.3 and earlier , where a Subscriber-level privilege escalation vulnerability exists. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-attackable flaw requiring only l...
CVE-2026-62102 WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...
CVE-2026-81803
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
CVE-2026-81801
The WP-Stateless WordPress plugin (versions ≤ 4.4.1) is affected by a Settings Change vulnerability discovered by Johan Buenavida via Patchstack. The flaw allows a low-privileged user (e.g., subscriber) to modify settings they should not have access to, over a network with low complexity and no u...
CVE-2026-81788
CVE-2026-81788 affects the WordPress IMPress for IDX Broker plugin in versions
CVE-2026-81783 WordPress MailMunch – Grow your Email List plugin <= 3.2.5 - Broken Authentication vulnerability
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-84066
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image...
EUVD-2026-70912
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9 does not verify that the requesting user owns the post being modified before writing uploaded file references to its metadata, allowing users with the subscriber role and above to overwrite image...