14401 matches found
PT-2026-80832
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
PT-2026-80814
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-27364: Missing Authorization
Subscriber Broken Access Control in Style Kits = 2.6.5 versions...
PT-2026-80835
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
PT-2026-80812
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
PT-2026-81050
Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...
PT-2026-81045
Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6 Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions. Recommendations Update Style Kits to version 2.6.6 or later...
CVE-2026-78266: Missing Authorization
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...
CVE-2026-32561: Incorrect Privilege Assignment
Subscriber Privilege Escalation in Booking Hub = 1.3.0 versions...
CVE-2026-32560: Improper Control of Filename for Include/Require Statement in PHP Program
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
PT-2026-80831
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-78272: Missing Authorization
Subscriber Broken Access Control in Fluent Support Pro = 2.3.1 versions...
CVE-2026-32478: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in WP Project Manager Pro = 4.0.1 versions...
CVE-2026-32471: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in ProLancer Element = 1.4.8 versions...
CVE-2026-28190: Missing Authorization
Subscriber Broken Access Control in ProLancer Element = 1.4.8 versions...
CVE-2026-32563: Deserialization of Untrusted Data
Subscriber PHP Object Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
PT-2026-81052
Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions 2.0.63 and earlier Description PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the resulting object and potentially...
PT-2026-81059
Subscriber Broken Access Control in AutomatorWP = 5.8.3 versions...