150494 matches found
EUVD-2026-70572
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...
CVE-2026-84778
An unauthenticated Denial of Service vulnerability affects the Migrate Guru – Site Migration & Cloning WordPress plugin in versions
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
EUVD-2026-70574
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
EUVD-2026-70573
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84776 WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
CVE-2026-84776
CVE-2026-84776 affects the MalCare Security WordPress plugin in versions ≤ 6.69 , where an unauthenticated Denial of Service (DoS) attack is possible. The vulnerability requires no user interaction and has low attack complexity , with a network-based attack vector. Per the CVSS 3.1 score of 7.5 (...
CVE-2026-84774
WP Statistics (WordPress plugin) versions
CVE-2026-84774 WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
EUVD-2026-70575
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
CVE-2026-84773 WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
EUVD-2026-70577
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84769
CVE-2026-84769 affects the WordPress Business Directory plugin in versions
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
EUVD-2026-70576
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84773
EWWW Image Optimizer for WordPress (versions
CVE-2026-84768
CVE-2026-84768 affects the WordPress VikAppointments Services Booking Calendar plugin in versions 1.2.20 and earlier . The vulnerability is an unauthenticated SQL Injection , meaning an attacker can exploit it without prior access or credentials. The CVSS 3.1 base score is 9.3 (CRITICAL) , with a...