EUVD-2026-117356

The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders WordPress plugin before 2.5.7's user restriction setting...

CVE-2026-120533

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via themeopts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-116617

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...

CVE-2026-104812

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multimedia' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject...

CVE-2026-104812 Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multimedia' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject...

CVE-2026-104812

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions. The vulnerability exists because the wp_kses_post sanitization during save operations only targets array leaf values, leaving array keys unsanitized. An authenticated attacker with subscri...

EUVD-2026-117328

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multimedia' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject...

CVE-2026-120533 Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via themeopts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-117329

The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via themeopts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-120533

The Redux Framework plugin for WordPress (versions up to and including 4.5.16 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the theme_opts parameter in the User Profile. The root cause is insufficient input sanitization and output escaping. Authenticated attackers with subscriber-level...

CVE-2026-116617 Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...

CVE-2026-116617

The Motors – Car Dealership & Classified Listings Plugin for WordPress is vulnerable to File Deletion in all versions up to and including 1.4.128 . The flaw exists because the stm_save_user_extra_fields() function writes the attacker-controlled stm_dealer_logo_path parameter directly to user meta...

EUVD-2026-117327

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...

CVE-2026-104799

The Mobile builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2 via the wcfmmpprofilesettings REST handler exposed at POST /mobile-builder/v1/wcfm-profile-settings. This is due to a PHP loose-comparison logic flaw in the meta key allow-lis...

CVE-2026-76124

The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the sendfeedback function. This is due to insufficient file type validation that relies solely on the client-supplied Content-Type header without server-side content...

EUVD-2026-115810

The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the sendfeedback function. This is due to insufficient file type validation that relies solely on the client-supplied Content-Type header without server-side content...

CVE-2026-76124

The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to and including 3.2.1 . The flaw exists in the send_feedback function due to insufficient file type validation, which relies exclusively on the client-supplied Content-Type header without server-side...

CVE-2026-76124 BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint

The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the sendfeedback function. This is due to insufficient file type validation that relies solely on the client-supplied Content-Type header without server-side content...

WordPress AZEXO Store Locator plugin <= 1.4 - Subscriber+ Arbitrary Post Deletion vulnerability

Subscriber+ Arbitrary Post Deletion vulnerability discovered by Nguyen Huu Do in WordPress Plugin AZEXO Store Locator versions = 1.4...

WordPress Photo Engine (Media Organizer & Lightroom) plugin <= 6.5.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Photo Engine versions = 6.5.7...