147453 matches found
EUVD-2026-68792
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780 WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Hash Form = 1.4.2 versions...
CVE-2026-81780
Hash Form is a WordPress plugin affected by an unauthenticated arbitrary file upload vulnerability in versions
CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...
CVE-2026-82221
CVE-2026-82221 affects the RegistrationMagic WordPress plugin (a custom registration form builder with submission manager) in versions ≤ 6.0.9.8 . The vulnerability is an unauthenticated Cross Site Scripting (XSS) , rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, ...
EUVD-2026-68793
Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...
CVE-2026-81768
CVE-2026-81768 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin Super Store Finder , affecting versions
CVE-2026-81765 WordPress Tailored Tools plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
EUVD-2026-68789
Unauthenticated Cross Site Scripting XSS in Tailored Tools = 3.0.2 versions...
CVE-2026-81765
CVE-2026-81765 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Tailored Tools , affecting versions 3.0.2 and earlier . The vulnerability was discovered by V1T and is rated HIGH (CVSS 3.1: 7.1) , with a network attack vector, low complexity, no privileges req...
EUVD-2026-68790
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
CVE-2026-81763 WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerability
Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...
CVE-2026-81763
CVE-2026-81763 is an unauthenticated SQL injection vulnerability in the WordPress plugin Throws SPAM Away (versions ≤ 3.8.2 ), discovered by Jiemook . The flaw allows a network-based attacker with no privileges to inject SQL queries, leading to a High impact on confidentiality and a Low impact on...
EUVD-2026-68787
Unauthenticated SQL Injection in Throws SPAM Away = 3.8.2 versions...
CVE-2026-81764 WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...
EUVD-2026-68788
Unauthenticated Cross Site Scripting XSS in Email Essentials = 6.0.6 versions...
CVE-2026-81764
CVE-2026-81764 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Email Essentials plugin, affecting versions 6.0.6 and earlier . Discovered by JunHee CHO , the flaw allows an attacker to inject script via the network with low complexity and no prior privileges , thou...