14298 matches found
WordPress JetBackup plugin 3.1.7.9-3.1.23.3 - Subscriber+ Privilege Escalation vulnerability
Subscriber+ Privilege Escalation vulnerability discovered by Jakub Herman in WordPress Plugin Backup Guard versions 3.1.7.9-3.1.23.3...
PT-2026-85115
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
PT-2026-85099
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
PT-2026-85087
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
PT-2026-85120
Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...
PT-2026-85086
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
PT-2026-85118
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
CVE-2026-81281: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Graphene = 2.9.4 versions...
CVE-2026-81282: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
CVE-2026-84814: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Bricksforge = 3.1.8.8 versions...
CVE-2026-84779: Missing Authorization
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84756: Incorrect Privilege Assignment
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
CVE-2025-15481
The Notification Bar for WordPress plugin (slug 8-degree-notification-bar) through version 1.1.8 exposes an unauthenticated CSV export script at inc/backend/blocks/export-csv.php, allowing anyone to download all stored subscriber email addresses without authentication. The vulnerability is rated ...
CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
CVE-2025-15481 Notification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data Disclosure
The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails...
CVE-2026-77009 WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console
The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server...
CVE-2026-77009
CVE-2026-77009 affects the WatchMan-Site7 WordPress plugin through version 4.2.0 . The plugin fails to restrict access to its debugging console , which executes user-supplied PHP code . Any authenticated user with a low privilege level (e.g., a subscriber ) can leverage this to achieve remote cod...
OPENSUSE-SU-2026:21741-1 Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged bsc1249011...
SUSE-SU-2026:23607-1 Security update for python-ruff
This update for python-ruff fixes the following issue: - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output after being logged bsc1249011...
