12392 matches found
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59559 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49224
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2026-59535
CVE-2026-59535 affects WordPress Thrive Product Manager plugin
CVE-2026-59535 WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
EUVD-2026-49206
Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions...
CVE-2026-59528
CVE-2026-59528 concerns the WordPress plugin ShipTime: Discounted Shipping Rates (versions
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BackWPup versions = 5.7.4...
WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Checkout Field Editor for WooCommerce Checkout Manager versions = 3.0.5...
WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Thrive Leads Version versions = 10.9.2...
PT-2026-64943
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
PT-2026-64939
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
PT-2026-64968
Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.3 versions...
PT-2026-65325
Name of the Vulnerable Software and Affected Versions Contest Gallery versions prior to 30.0.7 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update Contest Gallery to ...
PT-2026-65322
Name of the Vulnerable Software and Affected Versions BackWPup versions prior to 5.7.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update BackWPup to version...