12739 matches found
CVE-2026-66710
Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...
CVE-2026-66706
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66688
Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...
CVE-2026-66696
Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks = 3.7.8 versions...
CVE-2026-66692
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...
CVE-2026-66683
Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript = 2.0.16 versions...
CVE-2026-65575
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65576
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65543
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
CVE-2026-65515
Unauthenticated Cross Site Scripting XSS in AffiliateWP = 2.35.0 versions...
CVE-2026-65513
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...
CVE-2026-61959
Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...
EUVD-2026-53913
Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...
CVE-2026-66710
Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...
CVE-2026-66710
Technical details are not publicly available in the provided documents. The CVE-2026-66710 entry states an Unauthenticated Local File Inclusion in WordPress e2pdf plugin
CVE-2026-66708 WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
CVE-2026-66708
Unauthenticated Broken Access Control in Total Upkeep = 1.17.2 versions...
CVE-2026-66707
Unauthenticated Cross Site Scripting XSS in Facebook for WooCommerce = 3.7.5 versions...