63530 matches found
EUVD-2026-48217
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
EUVD-2026-48218
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65452
CVE-2026-65452 affects the WordPress Ebook Store plugin up to version 6.19, with an Unauthenticated Broken Access Control vulnerability. The description in both records confirms unauthenticated access issues that impact access control, but no technical exploit steps, root cause specifics, or reme...
CVE-2026-65453 WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65453
Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store
CVE-2026-65452 WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
EUVD-2026-48211
Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...
CVE-2026-61972 WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in ShopLentor Pro = 2.8.5 versions...
CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61954 WordPress PayU India plugin <= 3.8.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
EUVD-2026-48210
Unauthenticated Broken Access Control in PayU India = 3.8.9 versions...
CVE-2026-61950 WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability
Unauthenticated SQL Injection in TrueBooker = 1.2.3 versions...
CVE-2026-61949 WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in Bookly = 27.7 versions...
CVE-2026-61949
CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions
CVE-2026-61947 WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Form Vibes – Database Manager for Forms = 1.5.2 versions...
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
CVE-2026-61948 WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...
CVE-2026-61946 WordPress Easy Appointments plugin <= 3.12.27 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Easy Appointments = 3.12.27 versions...