14585 matches found
CVE-2026-65582 WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
CVE-2026-65582
CVE-2026-65582 affects the WordPress AI Hub theme (versions <= 1.3.10). The available documents describe a Subscriber Arbitrary File Download vulnerability in AI Hub
EUVD-2026-57971
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61966
CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...
CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
EUVD-2026-57964
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28186
The CVE-2026-28186 entry concerns the WordPress Travelfic Toolkit plugin
CVE-2026-28186
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Travelfic Toolkit = 1.5.1 versions...
CVE-2026-28182 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...
EUVD-2026-57962
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
CVE-2026-28182 WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...
CVE-2026-28182
CVE-2026-28182 describes a Subscriber Cross Site Scripting (XSS) vulnerability in the WordPress AcyMailing SMTP Newsletter plugin, affecting versions up to and including 10.11.1. The available documents confirm the vulnerability is XSS but do not provide details on the exact vulnerable component ...