13735 matches found
CVE-2026-91109
The Simply Schedule Appointments plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to and including 1.6.12.31 . The root cause is a lack of validation on a user-controlled key within the 'complete_group' parameter. Authenticated attackers with subscri...
EUVD-2026-90466
The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the 'completegroup' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
CVE-2026-92537 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...
CVE-2026-92537 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure)
The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugin's public click-tracking REST route /tnp/l/ is registered with permissioncallback = 'returntrue' and, upon receiving...
EUVD-2025-209818
The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the getsponsoredmeta AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password protect...
PT-2026-103737
Name of the Vulnerable Software and Affected Versions Super Forms – Drag & Drop Form Builder versions prior to 6.3.317 Description Authenticated users with Subscriber-level access and above can recursively delete arbitrary files and directories on the server, potentially leading to a full site...
PT-2026-103665
Name of the Vulnerable Software and Affected Versions Simply Schedule Appointments versions prior to 1.6.12.32 Description An Insecure Direct Object Reference IDOR exists due to missing validation on a user-controlled key. Authenticated attackers with subscriber-level access or higher can exploit...
PT-2026-103692
Name of the Vulnerable Software and Affected Versions Redux Framework versions prior to 4.5.15 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher...
CVE-2026-19807: Improper Privilege Management
The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the wpupdateusermeta MCP tool in executetool gating writes solely with currentusercan'edituser', $uid — a check that WordPress core'...
CVE-2026-103068: Incorrect Privilege Assignment
Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools = 1.2.2 versions...
PT-2026-103715
Name of the Vulnerable Software and Affected Versions ByteCoreStack – MCP Connector for AI Tools versions prior to 1.2.4 Description Authenticated users with Subscriber-level access or higher can elevate their privileges to Administrator. The issue exists in the execute tool function within the w...
CVE-2026-101925: Improper Neutralization of Input During Web Page Generation
The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayname via /wp-admin/profile.php + bbpreplycontent via bbPress reply form' parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This make...
CVE-2026-102376
Subscriber Cross Site Scripting XSS in Branda = 3.4.32 versions...
CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...
CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...
CVE-2025-14172-Nuclei-Template
📄 CVE-2025-14172 的 Nuclei 模板 🚀 概述 本仓库包含一个专门用于检测 WP Page Permalink Extension WordPress 插件中 缺失授权漏洞 CVE-2025-14172 的 Nuclei 模板。该漏洞允许经过身份验证的攻击者通过存在漏洞的 AJAX 操作远程刷新站点的重写规则。 🔍 漏洞描述 CVE-2025-14172 源于 WP Page Permalink Extension WordPress 插件中，cwpptriggerflushrewriterules 函数在挂接到...
CVE-2026-97270
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-97243
Subscriber Broken Access Control in AllAble Connector = 0.13.4 versions...