14390 matches found
CVE-2026-78278
Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...
CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78272
CVE-2026-78272 is a Subscriber Broken Access Control vulnerability in the Fluent Support Pro WordPress plugin, affecting versions
CVE-2026-78272 WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
EUVD-2026-64836
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
WordPress Royal MCP plugin < 1.4.26 - Subscriber+ Insufficient Authorization in MCP Tools vulnerability
Subscriber+ Insufficient Authorization in MCP Tools vulnerability discovered by Alessandro Greco aka Aleff, Giovanbattista Ianni University of Calabria - UNICAL in WordPress Plugin Royal MCP versions 1.4.26...
WordPress WANotifier plugin < 2.6 - Subscriber+ LFI vulnerability
Subscriber+ LFI vulnerability discovered by Project Black in WordPress Plugin Notifier versions 2.6...
WordPress TeraWallet - Wallet for WooCommerce plugin < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability
WordPress TeraWallet - Wallet for WooCommerce plugin 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up vulnerability discovered by Guillermo Álvarez Fernández in WordPress Plugin TeraWallet – For WooCommerce versions 1.6.10...
PT-2026-80813
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
PT-2026-80832
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
PT-2026-80814
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
PT-2026-80835
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
PT-2026-80812
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
PT-2026-81050
Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...
PT-2026-81045
Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6 Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions. Recommendations Update Style Kits to version 2.6.6 or later...
CVE-2026-78266: Missing Authorization
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
CVE-2026-32561: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-32560: Improper Control of Filename for Include/Require Statement in PHP Program
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...