14638 matches found
CVE-2026-59541 WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...
EUVD-2026-48189
Subscriber Broken Access Control in WP ERP = 1.17.5 versions...
CVE-2026-59522
The CVE-2026-59522 entry concerns the WordPress WP ERP plugin (versions
CVE-2026-59522 WordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP ERP = 1.17.5 versions...
CVE-2026-59513 WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...
EUVD-2026-48186
Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...
CVE-2026-59513 WordPress Masteriyo - LMS plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...
EUVD-2026-48183
Subscriber Arbitrary Content Deletion in WP EasyPay = 4.5.0 versions...
CVE-2026-57808
The CVE-2026-57808 entry concerns the WordPress WP EasyPay plugin (
EUVD-2026-48174
Subscriber Broken Access Control in Sunshine Photo Cart = 3.6.10.1 versions...
CVE-2026-57703
CVE-2026-57703 affects WordPress Sunshine Photo Cart plugin versions
CVE-2026-57699
The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...
EUVD-2026-48172
Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...
CVE-2026-57699 WordPress Slider Pro plugin <= 4.8.13 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...
CVE-2026-57384 WordPress WishList Member X plugin <= 3.32.0 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WishList Member X = 3.32.0 versions...
CVE-2026-27423
Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-57367 WordPress WP Booking System plugin < 5.12.8.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...
EUVD-2026-48161
Subscriber Broken Access Control in Participants Database = 2.7.8.4 versions...
CVE-2026-57367
CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...