44501 matches found
PT-2026-49379
Contributor PHP Object Injection in Post Duplicator = 3.0.10 versions...
CVE-2026-40769: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi – Save Entries, File Upload & Country Code Field = 1.0.6 versions...
PT-2026-49516
Name of the Vulnerable Software and Affected Versions Dokan versions prior to 5.0.3 Description A privilege escalation issue exists that allows a user with customer privileges to gain higher access levels. Recommendations Update to a version later than 5.0.2...
PT-2026-49351
Unauthenticated Cross Site Scripting XSS in Okay Toolkit = 2.3 versions...
PT-2026-49454
Unauthenticated Cross Site Scripting XSS in Simple Membership = 4.7.2 versions...
PT-2026-49484
Name of the Vulnerable Software and Affected Versions Visual Link Preview versions prior to 2.4.2 Description An issue in the plugin leads to the exposure of sensitive subscriber data. Recommendations Update to version 2.4.2 or later...
PT-2026-49494
Subscriber Sensitive Data Exposure in XCloner = 4.8.6 versions...
CVE-2026-39449: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Contact Form to Any API = 3.0.3 versions...
PT-2026-49429
Subscriber Insecure Direct Object References IDOR in KiviCare = 4.2.1 versions...
PT-2026-49227
Name of the Vulnerable Software and Affected Versions Really Simple SSL versions prior to 9.6.0 Description Broken Access Control allows users with the Subscriber role to perform unauthorized actions. Recommendations Update to a version newer than 9.5.9...
PT-2026-49506
Unauthenticated Broken Access Control in Knit Pay = 9.4.0.0 versions...
PT-2026-49485
Name of the Vulnerable Software and Affected Versions WP Job Portal versions prior to 2.5.3 Description Cross Site Scripting XSS exists in the plugin, allowing users with the Subscriber role to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than...
PT-2026-49512
Unauthenticated Broken Authentication in RegistrationMagic = 6.0.8.6 versions...
PT-2026-49373
Subscriber Broken Authentication in FunnelKit Automations = 3.7.3 versions...
CVE-2026-39468: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Meta Box – WordPress Custom Fields Framework = 5.11.1 versions...
PT-2026-49419
Unauthenticated Broken Access Control in Royal MCP = 1.4.2 versions...
PT-2026-49523
Subscriber SQL Injection in WCMultiShipping = 3.0.2 versions...
The vulnerability of the Braille support module of the text-to-speech application for blind and visually impaired users, allowing the intruder to enhance their privileges
The vulnerability of the Braille support module in the text-to-speech application for blind and visually impaired users like Narrator is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...