14277 matches found
CVE-2026-11496: Missing Authorization
The Woo PDF Invoice Builder plugin also distributed as "PDF Builder for WooCommerce" for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.8. This is due to the InspectOrder AJAX handler woocommerce-pdf-invoice-ajax.php:513, registered on...
CVE-2024-12145: Missing Authorization
The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bpnotificationsactionbulkmanage due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level...
PT-2026-90030
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
PT-2026-90595
Name of the Vulnerable Software and Affected Versions Smart Marketing SMS and Newsletters Forms versions prior to 5.1.25 Description This issue is a generic SQL Injection that allows authenticated attackers with subscriber-level access and above to append additional SQL queries to existing ones,...
PT-2026-90019
Subscriber Privilege Escalation in Gato GraphQL = 19.2.3 versions...
PT-2026-89776
The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated user such as a subscriber to store JavaScript that executes ...
CVE-2026-14565: Improper Neutralization of Input During Web Page Generation
The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated user such as a subscriber to store JavaScript that executes ...
CVE-2026-15439: Improper Neutralization of Special Elements used in an SQL Command
The GamiPress plugin for WordPress is vulnerable to authenticated Subscriber+ SQL Injection via the 'q' parameter of the wpForo integration AJAX selector action gamipresswpforogetposts in versions up to, and including, 7.9.7. The value is passed only through $wpdb-esclike and interpolated directl...
PT-2026-89863
The BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bp notifications action bulk manage due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
PT-2026-89777
The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order, allowing any authenticated user such as a subscriber to tamper with the custom metadata of orders belongi...
CVE-2026-81803
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81791
Subscriber Cross Site Scripting XSS in EventON = 2.5.7 versions...
CVE-2026-81788
Subscriber Broken Access Control in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81783
Subscriber Broken Authentication in MailMunch – Grow your Email List = 3.2.5 versions...
CVE-2026-81275
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
CVE-2026-81782
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
CVE-2026-81803
CVE-2026-81803 affects the WordPress RepairBuddy plugin in versions 4.1224 and below . A Subscriber-level (low-privilege) user can achieve Remote Code Execution (RCE) , meaning any authenticated user with the lowest typical WordPress role could potentially execute arbitrary code on the server. Th...
