166 matches found
WordPress Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin <= 4.8.6 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Jiemook in WordPress Plugin Wawp versions = 4.8.6...
WordPress Paytium: Mollie payment forms & donations plugin <= 5.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Aydan Arabadzha in WordPress Plugin Paytium versions = 5.0.3...
CVE-2026-5118
⚡ CVE-2026-5118 Divi Form Builder — 未認証の権限昇格 "セキュリティリサーチ" • "防御的検知" • "脆弱性リサーチ" --- 🔥 概要 CVE-2026-5118 は、Divi Form Builder バージョン 5.1.2 以下に影響する未認証の権限昇格脆弱性です。 この問題は、ユーザーが制御する登録パラメータの検証が不十分であることに起因し、登録データが要求される WordPress ユーザーロールに影響を与える可能性があります。 このリポジトリには、許可されたセキュリティテストのためのリサーチおよび防御的検知ツールが含まれています。 📌...
WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...
WordPress Meta Box AIO plugin <= 3.11.0 - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter vulnerability
Unauthenticated Privilege Escalation to Administrator to 'rwmbfrontendfieldobjectid' Parameter vulnerability discovered by h0xilo in WordPress Plugin Meta Box AIO versions = 3.11.0...
JFrog Artifactory 7.161.x < 7.161.16 Multiple Vulnerabilities
According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.161.x prior to 7.161.16. It is, therefore, affected by the following vulnerabilities. - An authentication weakness that, under default configuration, may allow an unauthenticated...
CVE-2026-66648: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...
CVE-2026-65507
Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...
CVE-2026-28005
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...
EUVD-2026-53963
Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...
CVE-2026-65507
Summary: CVE-2026-65507 affects the WordPress AIWU plugin versions <= 1.5.6 and is described as an unauthenticated privilege escalation. What is affected: WordPress AIWU plugin (
WordPress POUCO Import Users plugin <= 1.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin POUCO Import Users versions = 1.0.0...
WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Missing Authorization to Unauthenticated Privilege Escalation vulnerability
Missing Authorization to Unauthenticated Privilege Escalation vulnerability discovered by kr0d in WordPress Plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions = 2.4.37...
WordPress MountDev AI MCP Connector for WordPress plugin <= 1.6.1 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by AeonRisk in WordPress Plugin MountDev AI MCP Connector for WordPress versions = 1.6.1...
CVE-2026-12687
The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register into through its front-end registration, allowing unauthenticated users to register directly into a privileged group and be granted that group's configured role, up to Administrator whe...
WordPress Custom Fields Account Registration For Woocommerce plugin < 1.4 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Huynh Kien Minh in WordPress Plugin Custom Fields Account Registration For Woocommerce versions 1.4...
CVE-2026-12394 MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator
The MemberGlut WordPress plugin before 1.1.5 does not validate the role chosen during front-end registration, allowing unauthenticated users to register an account with an arbitrary role, including administrator, leading to full site compromise...
CVE-2026-59540
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.6 versions...