151066 matches found
EUVD-2026-70653
R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...
CVE-2026-84849
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
CVE-2026-84812
Unauthenticated Cross Site Scripting XSS in BP Better Messages = 2.15.27 versions...
CVE-2026-84813
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
CVE-2026-84847
Unauthenticated Broken Access Control in Quick Event Manager = 9.17 versions...
CVE-2026-84834
Unauthenticated PHP Object Injection in JobSearch = 3.2.0 versions...
CVE-2026-84848
Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...
CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84776
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
CVE-2026-84773
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84769
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84778
Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning = 6.65 versions...
CVE-2026-84768
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
CVE-2026-84774
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
CVE-2026-84761
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
CVE-2026-84767
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84763
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84762
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...