9979 matches found
CVE-2026-32559 WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in UltimateAI = 3.1.0 versions...
CVE-2026-27364
Broken Access Control vulnerability in the WordPress Style Kits plugin (AnalogWP) versions ≤ 2.6.5 . A Subscriber -level authenticated user can exploit insufficient access controls, resulting in a high impact on integrity (CVSS 3.1: 6.5 MEDIUM, vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). No conf...
CVE-2026-27364 WordPress Style Kits plugin <= 2.6.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in Style Kits = 2.6.5 versions...
CVE-2026-78272
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78278
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78277
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
CVE-2026-28190
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-32471
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-32478
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
CVE-2026-32478
CVE-2026-32478 is a Subscriber-level SQL Injection vulnerability in the WP Project Manager Pro WordPress plugin (versions ≤ 4.0.1 ), discovered by researcher dutafi . The flaw allows a user with the low-privilege Subscriber role to execute arbitrary SQL queries, resulting in high confidentiality ...
EUVD-2026-64802
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
CVE-2026-32478 WordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
CVE-2026-32471
ProLancer Element is a WordPress plugin affected by a subscriber-level SQL injection vulnerability in versions 1.4.8 and below . An authenticated subscriber (low privilege) can exploit this remotely over the network with low complexity and no user interaction. The CVSS 3.1 score is 8.5 (HIGH) , w...
EUVD-2026-64799
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-32471 WordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
EUVD-2026-64798
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-28190
CVE-2026-28190 is a Broken Access Control vulnerability in the ProLancer Element WordPress plugin, affecting versions 1.4.8 and earlier . The flaw allows users with the Subscriber role to perform actions beyond their intended privilege level, resulting in primarily integrity impact and minor avai...
CVE-2026-28190 WordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...