CVE-2026-84046: Server-Side Request Forgery (SSRF)

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not validate a user-supplied URL before fetching it server-side, allowing users with the subscriber role and above to make the server issue requests to internal addresses...

CVE-2026-86583: Incorrect Privilege Assignment

The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.4.17 via the plugin's own export and re-import workflow. The vulnerability exists because the exporter writes CSV cells using fputcsv with a NUL byte \0 as...

PT-2026-97198

Name of the Vulnerable Software and Affected Versions WC Fields Factory WordPress plugin versions prior to 4.1.11 Description Insufficient access restrictions on the field-management AJAX action allow authenticated users with Subscriber-level permissions or higher to create, modify, and delete...

CVE-2026-84098: Incorrect Authorization

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging...

PT-2026-97165

Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50 Description An issue exists where the plugin fails to perform a per-object ownership check when returning quiz attempt results. This allows any authenticated user with a subscriber role...

PT-2026-97451

Name of the Vulnerable Software and Affected Versions wpForo Forum versions prior to 3.1.6 Description A Cross Site Scripting XSS issue exists that allows users with Subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update wpForo Forum to version...

CVE-2026-95523: Authentication Bypass by Spoofing

Subscriber Bypass Vulnerability in WP User Frontend = 4.3.11 versions...

PT-2026-97171

🚨 CVE-2026-84098 The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, includi...

PT-2026-97483

Subscriber Cross Site Scripting XSS in PixelYourSite – Your smart PIXEL TAG Manager = 11.4.1 versions...

PT-2026-97159

Name of the Vulnerable Software and Affected Versions zportals WordPress plugin versions prior to 6.4.2 Description The plugin fails to perform capability or nonce checks on an AJAX action. This allows users with subscriber-level accounts to disclose the display name and email address of all...

PT-2026-97158

Name of the Vulnerable Software and Affected Versions zportals WordPress plugin versions prior to 6.4.2 Description The plugin fails to perform capability or nonce checks on several AJAX actions. This allows users with subscriber-level accounts to modify stored integration settings. A nonce is a...

PT-2026-97170

Name of the Vulnerable Software and Affected Versions The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin versions prior to 8.9.5 Description The plugin fails to validate a user-supplied URL before fetching it server-side. This allows users with the subscrib...

CVE-2026-75511 Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

Novu provides an API for sending notifications through multiple channels. Prior to 3.18.0, Novu accepts chat webhook URLs from subscriber credentials.webhookUrl, channel endpoint endpoint.url, event payload.webhookUrl, and event overrides.webhookUrl, then passes the selected endpoint.url through...

CVE-2026-93343

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkingadminvendorsajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the complete vendor directory by sending a crafted AJAX request...

CVE-2026-93341

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkingsendrefund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests against any order by supplying an arbitrary order ID. Attackers...

CVE-2026-93342

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkingduplicateproduct AJAX action that allows authenticated attackers with subscriber-level access or higher to duplicate any vendor's product by supplying an arbitrary product ID. Attackers c...

CVE-2026-93344 MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkinggetpagecontent AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor...

EUVD-2026-84401

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkinggetpagecontent AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor...

CVE-2026-93344

MarketKing is a multivendor marketplace plugin for WordPress (WooCommerce-based). Versions before 2.1.72 contain a missing authorization vulnerability in the marketking_get_page_content AJAX action. Any authenticated user with subscriber-level access or higher can bypass authorization by supplyin...

CVE-2026-93344 MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkinggetpagecontent AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor...