CVE-2026-66455

Subscriber Broken Access Control in ReactPress = 3.4.0 versions...

CVE-2026-66455

CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...

CVE-2026-66444

Affected software: WordPress Payment Forms for Paystack plugin

CVE-2026-66432

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-66430

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

EUVD-2026-57863

Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro = 11.10 versions...

EUVD-2026-57980

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-65582

Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...

CVE-2026-28186

The CVE-2026-28186 entry concerns the WordPress Travelfic Toolkit plugin

CVE-2026-28186

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...

CVE-2026-28184

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-28181

CVE-2026-28181 concerns the WordPress AcyMailing SMTP Newsletter plugin, affected in versions up to 10.11.1. The issue is described as a Broken Access Control vulnerability, enabling unauthorized access to certain resources due to insufficient access restrictions. Based on the provided metrics, t...

CVE-2026-28161

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

EUVD-2026-57953

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161

CVE-2026-28161 affects the WordPress Service Finder Booking plugin

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability

Subscriber SQL Injection in Do Lasso = 358 versions...

CVE-2026-27999

Subscriber Broken Access Control in Tourfic = 2.23.1 versions...