181332 matches found
CVE-2026-66461 WordPress SMEPay: UPI Gateway for WooCommerce plugin <= 1.0.5 - Payment Bypass vulnerability
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
CVE-2026-66461
Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...
CVE-2026-66459 WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66459
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
CVE-2026-66459
CVE-2026-66459 concerns the WordPress plugin AI for SEO, affected versions
EUVD-2026-57878
Unauthenticated Broken Access Control in AI for SEO = 2.4.2 versions...
EUVD-2026-57875
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66454 WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66454 WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66455
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
EUVD-2026-57874
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66454
CVE-2026-66454 affects the WordPress WP Social Avatar plugin (versions
CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in ReactPress = 3.4.0 versions...
CVE-2026-66455
CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...
EUVD-2026-57867
Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...
CVE-2026-66441
CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...