92962 matches found
CVE-2026-84776
CVE-2026-84776 affects the MalCare Security WordPress plugin in versions ≤ 6.69 , where an unauthenticated Denial of Service (DoS) attack is possible. The vulnerability requires no user interaction and has low attack complexity , with a network-based attack vector. Per the CVSS 3.1 score of 7.5 (...
CVE-2026-84773 WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84769
CVE-2026-84769 affects the WordPress Business Directory plugin in versions
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84773
EWWW Image Optimizer for WordPress (versions
CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
CVE-2026-84767
An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...
CVE-2026-84765
Breadcrumb NavXT , a popular WordPress plugin, is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions 7.5.1 and earlier . The flaw is classified with a CVSS 3.1 score of 7.1 (HIGH) , reflecting a network attack vector, low complexity, no privileges required, but re...
EUVD-2026-70582
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84763 WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
CVE-2026-84761
CVE-2026-84761 affects the WordPress LiteSpeed Cache plugin in versions 7.9 and earlier , where an unauthenticated Server Side Request Forgery (SSRF) flaw is present. The CVSS v3.1 score is 7.2 (HIGH) with a Changed scope and low impacts to both confidentiality and integrity, while availability i...
CVE-2026-84758
An unauthenticated Broken Access Control vulnerability affects the WordPress Business Directory plugin in versions 6.4.26 and earlier . A remote attacker with no prior access can exploit this flaw over the network with low complexity and no user interaction, resulting in low integrity and low ava...
EUVD-2026-70585
Unauthenticated Settings Change in WP Compress = 7.21.28 versions...
CVE-2026-84756 WordPress WCFM Membership plugin <= 2.11.11 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...
CVE-2026-84756
CVE-2026-84756 is a privilege escalation vulnerability affecting the WCFM Membership WordPress plugin in versions 2.11.11 and below . The flaw allows a user with Subscriber privileges to escalate their access level. The vulnerability is rated HIGH (CVSS 3.1: 7.1) , with a network attack vector, l...