88809 matches found
CVE-2026-3835
The CVE covers the WordPress plugin Prevent Direct Access – Protect WordPress Files. All versions up to 2.8.8.8 are affected due to insufficient token validation in get_advance_file_by_url(), which uses a SQL LIKE without escaping wildcards via $wpdb->esc_like(). This allows unauthenticated us...
PT-2026-71525
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
PT-2026-71563
Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...
PT-2026-71508
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
PT-2026-71519
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
PT-2026-71522
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
PT-2026-71500
Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...
PT-2026-71512
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
PT-2026-71502
Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...
PT-2026-71523
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...
PT-2026-71498
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
PT-2026-71557
Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...
PT-2026-71507
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
PT-2026-71521
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
PT-2026-71506
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
PT-2026-71496
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...
PT-2026-71592
Unauthenticated Cross Site Scripting XSS in SureDash = 1.10.1 versions...
PT-2026-71570
Unauthenticated Broken Access Control in Internal Link Optimiser = 5.2.7 versions...