168 matches found
WordPress Automation Web Platform 4.8.6 Vulnerability Checker
WordPress Automation Web Platform plugin versions through version 4.8.6 contain an unauthenticated privilege escalation vulnerability. This tool passively detects the plugin, identifies publicly exposed versions, and flags versions in the affected range...
WordPress Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin <= 4.8.6 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Jiemook in WordPress Plugin Wawp versions = 4.8.6...
WordPress Paytium: Mollie payment forms & donations plugin <= 5.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Aydan Arabadzha in WordPress Plugin Paytium versions = 5.0.3...
CVE-2026-5118
⚡ CVE-2026-5118 Divi Form Builder — Unauthenticated Privilege Escalation "Security Research" • "Defensive Detection" • "Vulnerability Research" --- 🔥 Overview CVE-2026-5118 is an unauthenticated privilege-escalation vulnerability affecting Divi Form Builder versions up to 5.1.2. The issue involve...
WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...
WordPress Meta Box AIO plugin <= 3.11.0 - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter vulnerability
Unauthenticated Privilege Escalation to Administrator to 'rwmbfrontendfieldobjectid' Parameter vulnerability discovered by h0xilo in WordPress Plugin Meta Box AIO versions = 3.11.0...
JFrog Artifactory 7.161.x < 7.161.16 Multiple Vulnerabilities
According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.161.x prior to 7.161.16. It is, therefore, affected by the following vulnerabilities. - An authentication weakness that, under default configuration, may allow an unauthenticated...
CVE-2026-66648: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...
CVE-2026-65507
Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...
CVE-2026-28005
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...
EUVD-2026-53963
Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...
CVE-2026-65507
Summary: CVE-2026-65507 affects the WordPress AIWU plugin versions <= 1.5.6 and is described as an unauthenticated privilege escalation. What is affected: WordPress AIWU plugin (
WordPress POUCO Import Users plugin <= 1.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin POUCO Import Users versions = 1.0.0...
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation vulnerability
Missing Authorization to Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions = 2.4.37...
WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.1 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by AeonRisk in WordPress Plugin MountDev AI MCP Connector for WordPress versions = 1.6.1...
CVE-2026-12687
The ProfileGrid WordPress plugin, in versions prior to 5.9.9.8 , contains an unauthenticated privilege escalation vulnerability. The flaw exists because the plugin fails to restrict which group an anonymous visitor can join during front-end registration. An unauthenticated user can exploit this b...
WordPress Custom Fields Account Registration For Woocommerce plugin < 1.4 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Huynh Kien Minh in WordPress Plugin Custom Fields Account Registration For Woocommerce versions 1.4...
CVE-2026-12394 MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise...