13735 matches found
CVE-2026-96819
Subscriber Cross Site Scripting XSS in oik = 4.15.4 versions...
CVE-2026-96338
Subscriber Cross Site Scripting XSS in Profile Builder = 4.0.2 versions...
CVE-2026-94178
Subscriber Privilege Escalation in Import and export users and customers = 2.5.2 versions...
CVE-2026-62083
Subscriber Other Vulnerability Type in Creator LMS = 1.2.19 versions...
CVE-2026-102386
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386
The WP Photo Album Plus WordPress plugin, version 9.3.02.003 and below, contains a Subscriber Cross Site Scripting (XSS) vulnerability. While the specific root cause and internal component are not detailed in the provided documents, the vulnerability allows for XSS impacts. No exploit details or ...
EUVD-2026-89942
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
EUVD-2026-89920
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-97270 WordPress CMB2 plugin <= 2.13.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in CMB2 = 2.13.0 versions...
CVE-2026-97267 WordPress Prevent files / folders access plugin <= 2.6.7 - Broken Access Control vulnerability
Subscriber Broken Access Control in Prevent files / folders access = 2.6.7 versions...
CVE-2026-97267
The Prevent files / folders access plugin for WordPress is affected by a Broken Access Control vulnerability in versions
CVE-2026-97246
The ShortPixel Image Optimizer plugin for WordPress (versions
EUVD-2026-89910
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97246 WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in ShortPixel Image Optimizer = 6.5.5 versions...
CVE-2026-97243
The AllAble Connector WordPress plugin, in versions
CVE-2026-97239 WordPress MCP Content Manager Lite plugin <= 1.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in MCP Content Manager Lite = 1.1.0 versions...