13617 matches found
CVE-2026-102386
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
EUVD-2026-89942
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386
The WP Photo Album Plus WordPress plugin, version 9.3.02.003 and below, contains a Subscriber Cross Site Scripting (XSS) vulnerability. While the specific root cause and internal component are not detailed in the provided documents, the vulnerability allows for XSS impacts. No exploit details or ...
CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
EUVD-2026-89920
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-97267 WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
CVE-2026-97267
The Prevent files / folders access plugin for WordPress is affected by a Broken Access Control vulnerability in versions
CVE-2026-97246
The ShortPixel Image Optimizer plugin for WordPress (versions
EUVD-2026-89910
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97243
The AllAble Connector WordPress plugin, in versions
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...
CVE-2026-97239
The WordPress MCP Content Manager Lite plugin (versions
CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...
EUVD-2026-89902
Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...
CVE-2026-97238 WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in JetEngine = 3.8.14.3 versions...