92448 matches found
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin <= 1.0.23 - Missing Authorization vulnerability
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin = 1.0.23 - Missing Authorization vulnerability discovered by revblock in WordPress Plugin Booktics versions = 1.0.23...
CVE-2025-10041
CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Unauthenticated Arbitrary File Upload 🚨 Flex QR Code Generator ≤ 1.2.5 - Unauthenticated Arbitrary File Upload 📝 Description The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation ...
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
EUVD-2026-75536
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821
CVE-2026-84821 affects the WP Fast Total Search WordPress plugin in versions
CVE-2026-84816 WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...
CVE-2026-81805
CVE-2026-81805 is an unauthenticated privilege escalation vulnerability affecting the SiteSkite WordPress plugin in versions 2.1.5 and earlier . A remote attacker with no prior authentication can escalate privileges on the target site, resulting in high impact on confidentiality, integrity, and a...
CVE-2026-81803
CVE-2026-81803 affects the WordPress RepairBuddy plugin in versions 4.1224 and below . A Subscriber-level (low-privilege) user can achieve Remote Code Execution (RCE) , meaning any authenticated user with the lowest typical WordPress role could potentially execute arbitrary code on the server. Th...
CVE-2026-81804
ZHBackup – Backup, Restore & Migration WordPress plugin versions up to and including 2.4.2 are affected by an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows an attacker to retrieve sensitive data over the network without any prior authentication or user interaction. The CV...
CVE-2026-81804 WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
CVE-2026-81803 WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
EUVD-2026-75530
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801 WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vulnerability
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81800
CVE-2026-81800 affects the WordPress plugin Verified Reviews (Avis Vérifiés) in versions ≤ 2.4.6 , where an unauthenticated SQL injection vulnerability is present. The flaw allows a remote attacker with no prior access to execute crafted SQL queries, resulting in a high confidentiality impact and...
CVE-2026-81799
An unauthenticated Broken Access Control vulnerability was discovered in the Return Refund and Exchange For WooCommerce WordPress plugin, affecting versions ≤ 4.6.4 . The flaw was identified by babyhack (@OPCIA) and carries a CVSS 3.1 score of 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C...
CVE-2026-81800 WordPress Verified Reviews (Avis Vérifiés) plugin <= 2.4.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in Verified Reviews Avis Vérifiés = 2.4.6 versions...
EUVD-2026-75527
Unauthenticated Broken Authentication in WP Travel = 12.0.3 versions...