12392 matches found
CVE-2026-65524
Contributor Broken Access Control in Avada Custom Branding = 1.2 versions...
CVE-2026-65510
Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-65503
Contributor Cross Site Scripting XSS in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65505
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-65482
Contributor Cross Site Scripting XSS in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65479
Subscriber Broken Access Control in Reviewer = 3.14.2 versions...
CVE-2026-65449
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
CVE-2026-65451
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59554
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59514
Unauthenticated SQL Injection in Buddyboss Platform = 3.0.5 versions...
CVE-2026-59525
Unauthenticated SQL Injection in Participants Database = 2.7.8.3 versions...
CVE-2026-59540
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...
CVE-2026-57699
Subscriber Cross Site Scripting XSS in Slider Pro = 4.8.13 versions...
CVE-2026-57696
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57716
Unauthenticated Arbitrary File Deletion in Broadcast Live Video = 7.2.4 versions...
CVE-2026-27403
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...
CVE-2026-27355
Unauthenticated Broken Access Control in Ditty = 3.1.66 versions...
WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by qdtad in WordPress Plugin GamiPress versions = 7.9.7...
CVE-2026-65540
Unauthenticated Cross Site Request Forgery CSRF in Popup for CF7 with Sweet Alert = 1.6.5 versions...
CVE-2026-65540
CVE-2026-65540 affects the WordPress plugin “Popup for CF7 with Sweet Alert” (versions <= 1.6.5). The vulnerability is a reported unauthenticated Cross Site Request Forgery (CSRF) weakness in this plugin. The CVSS data indicate: AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:L, base score 7.1 (HIGH)...