WordPress MasterStudy LMS WordPress Plugin plugin < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure vulnerability

Unauthenticated Unpublished Course Title Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin MasterStudy LMS versions 3.7.46...

EUVD-2026-69844

The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and...

EUVD-2026-69838

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled and password-protected posts...

CVE-2026-77783

The Rank Math SEO WordPress plugin (versions before 1.0.277 ) fails to verify that a post's schema is publicly viewable before rendering it on the front end. This allows unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled, and password-prot...

CVE-2026-77782

The Rank Math SEO WordPress plugin, versions before 1.0.277.1 , fails to check whether a post is password-protected before using its content to build publicly generated SEO metadata (via post metadata and llms.txt ). This allows unauthenticated users to read the content of password-protected post...

CVE-2026-74927

MultiVendorX WordPress plugin (versions 5.0.13–5.0.14 ) lacks proper authorization on its stores REST endpoint , enabling unauthenticated attackers to retrieve vendor contact information, payout details, pending payout amounts, and administrative notes attached to store applications. The issue is...

WordPress Rank Math SEO plugin < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure vulnerability

Unauthenticated Password-Protected Post Content Disclosure vulnerability discovered by Project Black in WordPress Plugin Rank Math SEO versions 1.0.277.1...

EUVD-2026-69835

The MultiVendorX WordPress plugin before 5.0.15 does not have proper authorisation controls on one of its REST API listing routes, allowing unauthenticated users to retrieve vendor contact and payout details, pending payout amounts, and administrative notes attached to store applications...

EUVD-2026-69864

The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation...

CVE-2026-19251 Ultimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile Activity

The Ultimate Member WordPress plugin before 2.13.0 does not check whether a comment has been approved, or whether the profile it belongs to is private, before returning profile activity to unauthenticated visitors, allowing them to read the content of comments still awaiting moderation...

CVE-2026-16966

Solace Extra WordPress plugin before 1.7.0 has a missing authorization and post-status check in its get_elementor_content AJAX action. This allows unauthenticated visitors to read the content of non-published Site Builder parts (draft, pending, private, and trashed) that WordPress would normally ...

CVE-2026-15232

The MotoPress Appointment Booking WordPress plugin before 2.4.8 lacks an authorization or ownership check when processing a user-supplied booking identifier on an unauthenticated endpoint , allowing attackers to permanently delete other users' reservations. This is an incomplete fix of CVE-2026-9...

CVE-2026-14215 Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not require authentication or a valid request token before running the post-booking action chain, allowing an unauthenticated user to trigger booking notifications and integration callbacks for a booking by...

CVE-2026-84485

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

CVE-2026-84485

APITable versions through 1.13.0-beta.1 expose an internal organization loadOrSearch endpoint without requiring authentication. This allows unauthenticated attackers to retrieve member names, email addresses, and team hierarchy by querying the endpoint with space identifiers obtained from shared ...

CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint

APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or...

CVE-2026-84700

PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...

CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port

PikiwiDB Pika v3.5.7 exposes an internal protobuf replication server on a port derived from the client port plus 2000 e.g. 11221 when the default client port 9221 is used that does not authenticate incoming requests. Although requirepass is intended to gate replication — a slave presents it as...

CVE-2026-84699 Team Password Manager before 14.184.308 Authentication Bypass in Password Reset

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access...