12741 matches found
CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49228
Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59559 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
EUVD-2026-49224
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2026-59535 WordPress Thrive Product Manager plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Product Manager = 10.9.2 versions...
CVE-2026-59535
CVE-2026-59535 affects WordPress Thrive Product Manager plugin
EUVD-2026-49206
Unauthenticated Broken Access Control in Stripe For WooCommerce = 4.0.7 versions...
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59528
CVE-2026-59528 concerns the WordPress plugin ShipTime: Discounted Shipping Rates (versions
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin BackWPup versions = 5.7.4...
WordPress Checkout Field Editor for WooCommerce – Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Checkout Field Editor for WooCommerce Checkout Manager versions = 3.0.5...
WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Thrive Leads Version versions = 10.9.2...
PT-2026-64943
Unauthenticated Broken Access Control in Events Made Easy = 3.1.3 versions...
PT-2026-64946
Subscriber Broken Access Control in FundEngine = 1.7.8 versions...
PT-2026-64939
Subscriber SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
PT-2026-65322
Name of the Vulnerable Software and Affected Versions BackWPup versions prior to 5.7.5 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Update BackWPup to version...