154102 matches found
CVE-2026-84770
Unauthenticated Cross Site Request Forgery CSRF in Mang Board WP = 2.3.8 versions...
CVE-2026-81775
Unauthenticated Cross Site Scripting XSS in Estatik = 4.3.4 versions...
CVE-2026-82223
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.22 versions...
CVE-2026-81770
Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...
CVE-2026-81772
Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles = 3.0.31 versions...
CVE-2026-81288
Unauthenticated Cross Site Scripting XSS in Upsell Order Bump Offer for WooCommerce = 3.1.5 versions...
CVE-2026-81294
Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...
CVE-2026-81286
Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...
CVE-2026-82562
A flaw was found in qs. An unauthenticated attacker can exploit this by sending a specially crafted query string to an application using qs.parse with specific non-default settings comma: true and throwOnLimitExceeded: true. This bypasses a configured array limit, causing the parser to allocate a...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
CVE-2026-84780 WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in WP Go Maps = 10.1.08 versions...
CVE-2026-84780
WP Go Maps is a WordPress plugin affected by an unauthenticated Denial of Service vulnerability in versions ≤ 10.1.08 , as reported by researcher Asim Alshaya via Patchstack. The CVSS 3.1 score is 5.3 (Medium) with a network attack vector, low complexity, and no privileges required, resulting in ...
EUVD-2026-69942
Unauthenticated Denial of Service Attack in WP Go Maps = 10.1.08 versions...
CVE-2026-84775
CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...
EUVD-2026-69941
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
CVE-2026-84771
This unauthenticated IDOR vulnerability affects the WordPress PublishPress Permissions plugin in versions 4.8.3 and earlier . Discovered by Brobicho and assigned by Patchstack , it allows a remote attacker with no privileges to access resources they should not, resulting in a low confidentiality ...
CVE-2026-84771 WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in PublishPress Permissions = 4.8.3 versions...