EUVD-2026-76786

The BE REST Endpoints WordPress plugin through 1.0.0 does not perform any authorization check before allowing widgets to be read, created, updated and deleted, and does not sanitize the values it stores in them, allowing unauthenticated users to inject arbitrary web scripts which will execute in...

CVE-2026-81402

The DS Ad Rotator WordPress plugin (through version 0.8 ) has an unauthenticated arbitrary file upload vulnerability in its image upload handler. The handler performs no capability check , nonce verification , or file-type validation , allowing unauthenticated attackers to upload arbitrary files—...

EUVD-2026-76787

The Masteriyo LMS WordPress plugin before 3.4.1 does not prevent user-supplied values held as metadata from being deserialized when they are read back, allowing users with a minimal account to inject arbitrary PHP objects and, by way of a class shipped in a library bundled with the Masteriyo LMS...

EUVD-2026-76784

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-81090

The Gpx2Graphics WordPress plugin, versions through 0.3 , fails to perform a CSRF check and does not validate the file type when handling file uploads. An attacker can exploit this by tricking a logged-in administrator into uploading an arbitrary file (e.g., a PHP script) via a crafted CSRF reque...

CVE-2026-80494

The Yogeta WP Cloud WordPress plugin through version 1.0 is affected by an unauthenticated arbitrary file download vulnerability. The root cause is that the plugin does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorizati...

CVE-2026-80491

The SAMO Forms WordPress plugin through version 1.0.0 is affected by a SQL injection vulnerability caused by improper sanitisation and escaping of user input before it is used in SQL queries across several unauthenticated actions. This allows unauthenticated attackers to execute arbitrary SQL, po...

CVE-2026-78152

The SureRank SEO WordPress plugin (versions 1.6.2 through 1.10.0 ) outputs Person Schema structured data on public pages that includes registered user email addresses by default. Because this data is not excluded by default, unauthenticated visitors can harvest the email address of any user who h...

EUVD-2026-76809

The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...

EUVD-2026-76808

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks...

EUVD-2026-76782

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

EUVD-2026-76783

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

CVE-2026-77005

The CODE MONKEYS PROPOSALS WordPress plugin (through 1.0.1 ) fails to validate a user-supplied file path before performing a file deletion and does not check the capability of the requesting user. This allows any authenticated user , including low-privilege roles such as Subscriber , to delete ar...

EUVD-2026-76814

The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the...

CVE-2026-77006

The WebTotem Backups WordPress plugin (through version 1.0.1 ) suffers from arbitrary file deletion via path traversal exploitable by any authenticated user at the subscriber level or above. Three combined weaknesses enable this: the plugin does not validate a user-supplied file path, does not ch...

CVE-2026-77705

CVE-2026-77705 affects the Booking for Appointments and Events Calendar WordPress plugin (also known as Amelia ) in versions prior to 2.4.10 . The vulnerability stems from a missing authorization check when editing a customer or employee record: the plugin does not verify that the user performing...

CVE-2026-77689

Booking for Appointments and Events Calendar (also referenced as Amelia Pro ) is a WordPress plugin affected in versions 9.0 through 9.8 (before 9.8.1). The vulnerability stems from the plugin not verifying that a payment was actually collected before recording a booking as paid. It trusts the pa...

EUVD-2026-76815

The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can...

CVE-2026-75800

The Frontegg SAML SSO WordPress plugin through version 1.0.1 fails to verify the signature or issuer of SAML authentication responses before establishing a user session. This lack of validation allows unauthenticated attackers to take over any account, including administrators , or to create arbi...

EUVD-2026-76816

The Frontegg SAML SSO WordPress plugin through 1.0.1 does not verify the signature or issuer of SAML authentication responses before establishing a session, allowing unauthenticated attackers to log in as any user, including administrators, as well as to create arbitrary accounts...