18551 matches found
CVE-2026-81801
The WP-Stateless WordPress plugin (versions ≤ 4.4.1) is affected by a Settings Change vulnerability discovered by Johan Buenavida via Patchstack. The flaw allows a low-privileged user (e.g., subscriber) to modify settings they should not have access to, over a network with low complexity and no u...
EUVD-2026-75527
Unauthenticated Broken Authentication in WP Travel = 12.0.3 versions...
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81796
CVE-2026-81796 is an unauthenticated Broken Authentication vulnerability in the WordPress WP Travel plugin , affecting versions
CVE-2026-81796 WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81782 WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
EUVD-2026-75515
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
CVE-2026-81782
WordPress WP Docs plugin versions up to 2.3.1 contain a Cross-Site Scripting (XSS) vulnerability accessible to Subscriber-level users. The CVSS v3.1 score is 6.5 (Medium) , with a network attack vector, low complexity, required user interaction, and a changed scope resulting in low impact on conf...
CVE-2026-81782 WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
WordPress WP Express Checkout plugin < 2.5.0 - Unauthenticated Payment Bypass vulnerability
Unauthenticated Payment Bypass vulnerability discovered by ryan zegar in WordPress Plugin WP Express Checkout Accept PayPal Payments versions 2.5.0...
WordPress Quentn WP plugin 1.2.13-1.2.14 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Quentn WP versions 1.2.13-1.2.14...
WordPress WP Business Intelligence Lite plugin <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation vulnerability
Authenticated Subscriber+ Missing Authorization to Privilege Escalation vulnerability discovered by Nabil Irawan in WordPress Plugin Business Intelligence Lite versions = 3.2.0...
CVE-2026-18386
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-18386
The WP BackItUp Community Edition WordPress plugin (all versions up to and including 2.1.0 ) is vulnerable to directory traversal via the backup_file parameter in its download handler. The root cause is that the basename() normalization only executes when the traversed target path does not exist,...
CVE-2026-18386 WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-81801: Missing Authorization
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81782: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
PT-2026-89265
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wp ajax ba cheetah disable AJAX handler is registered without any capability or nonce...