24849 matches found
CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-84757
CVE-2026-84757 affects the WordPress WP Compress plugin in versions 7.21.28 and earlier . The vulnerability is an unauthenticated Settings Change , meaning an attacker with no prior access can modify plugin settings over the network without any user interaction. This yields a CVSS 3.1 base score ...
EUVD-2026-70585
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-81776
CVE-2026-81776 affects the WordPress WP QuickLaTeX plugin in versions
EUVD-2026-70592
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-84757: Missing Authorization
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-81776: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
CVE-2026-84774: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
CVE-2026-84762: External Control of Assumed-Immutable Web Parameter
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
PT-2026-85111
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
PT-2026-85092
Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...
PT-2026-85103
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
PT-2026-85100
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-83533
The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...
CVE-2025-8945
The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API...
CVE-2025-8945 Wp Edit Password Protected < 1.3.5 - Protection Bypass via REST API
The Wp Edit Password Protected WordPress plugin before 1.3.5 allows protecting page content, but this protection can be bypassed by using the REST API...