151075 matches found
CVE-2026-84758 WordPress Business Directory plugin <= 6.4.26 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
CVE-2026-84758
An unauthenticated Broken Access Control vulnerability affects the WordPress Business Directory plugin in versions 6.4.26 and earlier . A remote attacker with no prior access can exploit this flaw over the network with low complexity and no user interaction, resulting in low integrity and low ava...
EUVD-2026-70584
Unauthenticated Broken Access Control in Business Directory = 6.4.26 versions...
CVE-2026-84757
CVE-2026-84757 affects the WordPress WP Compress plugin in versions 7.21.28 and earlier . The vulnerability is an unauthenticated Settings Change , meaning an attacker with no prior access can modify plugin settings over the network without any user interaction. This yields a CVSS 3.1 base score ...
EUVD-2026-70585
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
EUVD-2026-70588
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
CVE-2026-84754 WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPFunnels = 3.12.13 versions...
EUVD-2026-70587
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84755
Mail Mint is a WordPress plugin affected by an unauthenticated Broken Access Control vulnerability in versions 1.31.0 and below . The flaw allows a remote attacker with no prior access to perform unauthorized actions on the plugin, resulting in low confidentiality and low integrity impact with no...
CVE-2026-84754
CVE-2026-84754 affects the WordPress WPFunnels plugin in versions ≤ 3.12.13 , where an unauthenticated broken access control flaw allows a remote attacker to manipulate integrity and availability of the target system without any user interaction. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector o...
CVE-2026-84755 WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...
CVE-2026-84753 WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84753
CVE-2026-84753 affects the WordPress Mail Mint plugin in versions 1.31.0 and below , where an unauthenticated PHP Object Injection flaw allows a remote attacker to inject arbitrary serialized objects into the application. The vulnerability is rated CVSS 9.8 (CRITICAL) with high impact to confiden...
EUVD-2026-70589
Unauthenticated PHP Object Injection in Mail Mint = 1.31.0 versions...
CVE-2026-84238
CVE-2026-84238 affects the YITH Request a Quote for WooCommerce Premium WordPress plugin in versions prior to 4.46.0 . The vulnerability is an unauthenticated Broken Access Control flaw, meaning an attacker can exploit it over the network without any prior access or user interaction. The CVSS 3.1...
CVE-2026-84238 WordPress YITH Request a Quote for WooCommerce Premium plugin < 4.46.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
EUVD-2026-70563
Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium 4.46.0 versions...
CVE-2026-84215
CVE-2026-84215 affects the WordPress Timetics plugin in versions 1.0.61 and earlier . The vulnerability is an unauthenticated Broken Access Control flaw, rated CVSS 6.5 (Medium) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L. This means an unauthenticated network-based attacker can exploit ...