4978 matches found
CVE-2026-13764
The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...
CVE-2026-15309
The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajaxsavesettings function, which accepts arbitrary POST parameters and calls updateoption with attacker-controlled keys and...
CVE-2026-13764 Masterstudy - Education WordPress Theme <= 4.8.151 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...
CVE-2026-13764
The Masterstudy - Education WordPress Theme for WordPress (versions up to and including 4.8.151 ) is vulnerable to Privilege Escalation due to missing authorization and nonce validation on the masterstudy_ms_stm_set_discard_transient AJAX action. This flaw allows authenticated attackers with Subs...
EUVD-2026-124349
The VibeBP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.9.8.1. This is due to the plugin allowing arbitrary user meta updates through the setemailnotificationsettings function. This makes it possible for authenticated attackers, with...
EUVD-2026-124350
The Masterstudy - Education WordPress Theme theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.151. This is due to missing authorization and nonce validation on the masterstudymsstmsetdiscardtransient AJAX action. This makes it possible for...
CVE-2026-15309
The CourseCure Courses plugin for WordPress (versions up to and including 1.5.1 ) is vulnerable to Privilege Escalation via the ajax_save_settings() function. The root cause is a missing capability check that allows authenticated users with subscriber-level access or higher to submit arbitrary PO...
CVE-2026-15309 CourseCure Courses <= 1.5.1 - Authenticated (Subscriber+) Privilege Escalation to 'ajax_save_settings' Endpoint
The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajaxsavesettings function, which accepts arbitrary POST parameters and calls updateoption with attacker-controlled keys and...
EUVD-2026-124347
The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajaxsavesettings function, which accepts arbitrary POST parameters and calls updateoption with attacker-controlled keys and...
CVE-2026-118531
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing...
CVE-2026-118531 Directorist < 8.11.1 - Subscriber+ Listing Moderation Bypass via REST Status Update
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing...
CVE-2026-118531
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin, in versions prior to 8.11.1 , contains a vulnerability that fails to restrict a listing's author from modifying its status. This allows users with a Subscriber-level account or higher to bypass administrat...
EUVD-2026-124274
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing...
CVE-2026-118531: Unknown: The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not…
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing...
PT-2026-145704
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.11.1 does not prevent a listing's own author from changing its status from pending to published, allowing users with a Subscriber-level account and above to bypass the administrator's listing...
CVE-2023-2916
CVE-2023-2916 CVE-2023-2916 PoC The InfiniteWP Client plugin for WordPress, in versions up to and including 1.11.1, is vulnerable to a Sensitive Information Exposure flaw. This vulnerability allows authenticated attackers with subscriber-level permissions or above to extract sensitive data,...
CVE-2023-6985
CVE-2023-6985 10Web AI Assistant – AI content writing assistant = 1.0.18 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description Description The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized...
CVE-2023-47840
CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...
CVE-2026-119097
The Author Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayname' parameter in all versions up to, and including, 4.9.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level acce...