59850 matches found
CVE-2026-66477 WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Gillion = 4.13 versions...
CVE-2026-66438 WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...
CVE-2026-65567
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65567
The vulnerability concerns the WordPress Event Tickets plugin for WordPress, affected in versions ≤ 5.29.0.1. It is described as an Unauthenticated Broken Access Control flaw, meaning unauthenticated users can access restricted functionality or data. The CVE-2026-65567 entry confirms the issue wi...
CVE-2026-65567 WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event Tickets = 5.29.0.1 versions...
CVE-2026-65564 WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in MapPress Maps for WordPress = 2.97.6 versions...
CVE-2026-65558 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...
EUVD-2026-49230
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65435 WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
CVE-2026-59557
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59557
CVE-2026-59557 relates to the WordPress Events Made Easy plugin, affected versions
CVE-2026-59556
Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...
CVE-2026-59556 WordPress Dynamic Pricing With Discount Rules for WooCommerce plugin <= 4.5.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Dynamic Pricing With Discount Rules for WooCommerce = 4.5.11 versions...
CVE-2026-59552
CVE-2026-59552 concerns the WordPress plugin 3D Flipbook PDF Viewer & Embedder (versions
CVE-2026-59552
Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...
CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550
CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions