WordPress Advanced File Manager < 5.4.13 - Arbitrary File Read

The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access as low as Subscriber to read arbitrary files on the server. id:...

WordPress Bit File Manager < 6.9.1 - Arbitrary File Read

The Bit File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory. id: CVE-2026-17540 info: name: WordPress Bit File...

CVE-2026-123064

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their...

CVE-2026-123064

The WP BASE Booking of Appointments, Services and Events WordPress plugin (versions prior to 6.5.1 ) contains a privilege escalation vulnerability. The root cause is that the plugin does not properly restrict access to one of its user-creation actions . This allows authenticated users with Subscr...

CVE-2026-123064 WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege Escalation

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their...

CVE-2026-123064 WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege Escalation

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their...

CVE-2026-115204

The AZEXO Store Locator WordPress plugin (versions through 1.4 ) is vulnerable to arbitrary file write due to a lack of capability and nonce checks on its AJAX actions. Specifically, the plugin fails to sanitize a request header used to construct a file path, which allows an authenticated user—wi...

CVE-2026-115212

The mView 豆瓣电影 WordPress plugin (versions through 1.0.3 ) contains an arbitrary file upload vulnerability. The plugin fails to validate the type, name, or source of remotely fetched files and lacks proper capability or authorization checks before saving them to a web-accessible directory. This al...

CVE-2026-115212 mView <= 1.0.3 - Subscriber+ Arbitrary File Upload

The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authenticated user such as a subscriber to upload arbitrary PHP fil...

CVE-2026-115204 AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_import

The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does not sanitise a request header used to build a file path, allowing any authenticated user such as a subscriber to write a file with an arbitrary name, location, and content...

CVE-2026-115212 mView <= 1.0.3 - Subscriber+ Arbitrary File Upload

The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authenticated user such as a subscriber to upload arbitrary PHP fil...

CVE-2026-115204 AZEXO Store Locator <= 1.4 - Subscriber+ Arbitrary File Write via azt_items_import

The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does not sanitise a request header used to build a file path, allowing any authenticated user such as a subscriber to write a file with an arbitrary name, location, and content...

VulnCheck KEV: CVE-2025-11746

The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...

VulnCheck KEV: CVE-2025-6070

The Restrict File Access plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.2 via the output function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server...

WordPress BackUpWordPress plugin < 3.15 - Subscriber+ Backup Directory File Deletion vulnerability

Subscriber+ Backup Directory File Deletion vulnerability discovered by Suhayb Ahmed cyboltx in WordPress Plugin BackUpWordPress versions 3.15...

CVE-2026-104307

The BackUpWordPress plugin (versions before 3.15 ) is vulnerable to an unauthorized file deletion flaw. The root cause is the failure to perform capability or nonce checks on an AJAX action intended to clean up the backup directory. This allows any authenticated user with Subscriber privileges or...

PT-2026-139914

The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX action that carries out a site-wide content rewrite, so any authenticated user, including subscriber-level, can trigger a bulk modification of posts they should not be able to ed...

CVE-2026-96565

The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Checkout Multicheckbox/Multiselect Field scalar bypass of wpmemsanitizearray in all versions up to, and including, 3.5.7 due to insufficient input sanitization and output escaping...

CVE-2026-122059

The WP ImageViewer plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'img.alt' parameter in all versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-118056

The Image Hover Effects Ultimate Image Gallery, Effects, Lightbox, Comparison & Magnifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rawdata.oxiimagecomparisonbeforetext' parameter in all versions up to, and including, 9.12.2 due to insufficient input sanitization...