EUVD-2026-84401

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkinggetpagecontent AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor...

CVE-2026-93344

MarketKing is a multivendor marketplace plugin for WordPress (WooCommerce-based). Versions before 2.1.72 contain a missing authorization vulnerability in the marketking_get_page_content AJAX action. Any authenticated user with subscriber-level access or higher can bypass authorization by supplyin...

CVE-2026-93344 MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkinggetpagecontent AJAX action that allows authenticated attackers with subscriber-level access or higher to access arbitrary vendor administrator panel pages by supplying an arbitrary vendor...

CVE-2026-93343

The MarketKing WordPress plugin (Multivendor Marketplace for WooCommerce) before version 2.1.72 contains a missing authorization flaw in the marketking_admin_vendors_ajax AJAX action. Due to absent capability checks, any authenticated user with subscriber-level access or higher can send a crafted...

EUVD-2026-84400

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkingadminvendorsajax AJAX action that allows authenticated attackers with subscriber-level access or higher to retrieve the complete vendor directory by sending a crafted AJAX request...

CVE-2026-93342

The MarketKing multivendor marketplace plugin for WordPress (WooCommerce) prior to 2.1.72 contains a missing authorization flaw in the marketking_duplicate_product AJAX action. Because ownership verification is bypassed, any authenticated user with subscriber-level or higher privileges can supply...

CVE-2026-93341 MarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAX

MarketKing plugin for WordPress before 2.1.72 contains a missing authorization vulnerability in the marketkingsendrefund AJAX action that allows authenticated attackers with subscriber-level access or higher to create refund requests against any order by supplying an arbitrary order ID. Attackers...

CVE-2026-93341

The MarketKing plugin for WordPress (a multi-vendor marketplace for WooCommerce) versions before 2.1.72 contain a missing authorization vulnerability in the marketking_send_refund AJAX action. Authenticated users with subscriber-level access or higher can supply an arbitrary order ID to create fr...

WordPress AppMySite – WordPress & WooCommerce Mobile App Builder (No-Code Android & iOS App Maker) plugin <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Mitchell in WordPress Plugin AppMySite versions = 3.15.3...

WordPress Redux Framework plugin <= 4.5.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Luc Huynh from Noventiq RedTeam in WordPress Plugin Redux Framework versions = 4.5.13...

CVE-2026-91092

The wpForo Forum plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level acces...

CVE-2026-92235

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

CVE-2026-7622

The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and nonce verification in the senddeactivationsurvey function registered via the wpajaxpl-plugin-deactivation AJAX action. This makes it possibl...

CVE-2026-6922

The WP Table Builder – Drag & Drop Table Builder plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 2.2.1. This is due to an operator precedence bug in the post-type guard within the trashtablebulk and restoretablebulk functions that causes the gua...

WordPress WP Ultimate Review plugin <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability

Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by jtb75 in WordPress Plugin Wp Ultimate Review versions = 2.4.2...

EUVD-2026-84308

The ThumbPress plugin for WordPress is vulnerable to unauthorized access in versions up to and including 6.2.1. This is due to missing capability checks and nonce verification in the senddeactivationsurvey function registered via the wpajaxpl-plugin-deactivation AJAX action. This makes it possibl...

CVE-2025-1280

BM Content Builder is a WordPress plugin affected by a Directory Traversal vulnerability in the ux_cb_page_customize_save_layout_ajax() function. All versions prior to 3.17.1 are impacted, allowing authenticated attackers with Subscriber-level privileges or higher to read arbitrary files on the s...

CVE-2026-92235

The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2 . The root cause is that the xs_submit_review_data[xs_reviw_summery] parameter is not properly validated before being passed to do_shortcode , allowing authentica...

EUVD-2026-84305

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...

CVE-2026-92235 WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.2. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible fo...