90627 matches found
CVE-2026-65545 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
CVE-2026-65542
CVE-2026-65542 concerns the WordPress WordPress Super Socializer plugin, affected versions
CVE-2026-65541 WordPress Staff Training plugin <= 1.0.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
The CVE concerns WordPress Plugin “Staff Training” versions
CVE-2026-65520
CVE-2026-65520 concerns the WordPress plugin WP OAuth Server (vulnerable:
CVE-2026-65523
CVE-2026-65523 affects the WordPress plugin Formidable Forms Signature Online Contract Automation (versions
CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...
CVE-2026-65517
The connected documents confirm a vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” affecting versions up to 2.0.4, described as Unauthenticated Cross Site Scripting (XSS). No details on the root cause, exploit method, affected components beyond the plugin, impact metrics, or ava...
CVE-2026-65513
CVE-2026-65513 affects the WordPress plugin Simply Schedule Appointments (versions ≤ 1.6.12.10). The connected sources consistently describe an Unauthenticated XSS vulnerability impacting this plugin. The vulnerability is described without details on the exact vulnerable component, payload, or ex...
CVE-2026-65508
The CVE-2026-65508 entry concerns the WordPress plugin Simply Schedule Appointments (vulnerable:
CVE-2026-65504
CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions
CVE-2026-61982
CVE-2026-61982 describes an unauthenticated Cross Site Scripting (XSS) vulnerability affecting WordPress SiteGuard WP Plugin versions
CVE-2026-61982
Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...
EUVD-2026-53960
Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...
EUVD-2026-53954
Unauthenticated Bypass Vulnerability in CAPTCHA 4WP = 7.6.0 versions...
CVE-2026-28180
The CVE describes an unauthenticated Insecure Direct Object References (IDOR) vulnerability in the Mercado Pago payments for WooCommerce plugin for WordPress, affecting versions
CVE-2026-28169
CVE-2026-28169 concerns unauthenticated sensitive data exposure in the WordPress plugin YITH WooCommerce Zoom Magnifier (versions
CVE-2026-28146
CVE-2026-28146 is about an Arbitrary File Download vulnerability in the WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) , affecting versions up to and including 2.0.14. The connected reports identify the affected product and vulnerability type but do not provid...