Lucene search
+L

591392 matches found

EUVD
EUVD
added 4 days ago12 views

EUVD-2026-54739

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to retrieve stored contact messages and associated user data belonging to other users...

5.3AI score0.00219EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago9 views

CVE-2026-16608

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's...

5.4AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-16608 Download Monitor < 5.2.6 - Unauthenticated Download Log Injection

The Download Monitor WordPress plugin before 5.2.6 does not perform authorization checks on one of its download-logging AJAX actions, and exposes the nonce protecting it to unauthenticated visitors, allowing unauthenticated users to inject arbitrary download log entries and inflate a site's...

0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago40 views

CVE-2026-16595 WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the site's user list and unpublished listings belonging to other users...

0.00219EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago42 views

CVE-2026-16608

The Download Monitor WordPress plugin (before 5.2.6) is affected by an unauthenticated download-logging AJAX action due to missing authorization checks and an exposed nonce. This allows unauthenticated users to inject arbitrary download log entries and inflate site statistics. Root cause: inadequ...

5.3CVSS5.4AI score0.00136EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago12 views

EUVD-2026-54735

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data...

5.2AI score0.00219EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-16562 WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox AJAX Handlers

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data...

0.00219EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago34 views

CVE-2026-16574

The vulnerability affects the Dokan AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin prior to version 5.0.11. The underlying issue is that the plugin does not verify that a downloadable product belongs to the requesting vendor before granting download permissions via an or...

5.4CVSS5.2AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-54736

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant...

5.2AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago37 views

CVE-2026-16535 Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago39 views

CVE-2026-16574 Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant...

0.00132EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-16574

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant...

5.2AI score0.00132EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-54737

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

5.4AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-54732

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action...

5.2AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago38 views

CVE-2026-16578 Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app/users REST Route

The Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin before 1.4.0 does not perform any capability check on one of its REST API endpoints, allowing unauthenticated attackers to retrieve the full list of registered users including their usernames, ema...

0.00288EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago44 views

CVE-2026-16559

The CVE pertains to the YMC Filter WordPress plugin (before 3.12.9). The vulnerability arises because SVGs uploaded via an icon feature are not sanitized, allowing low-privilege users (Author role and above) to upload a file containing JavaScript that executes in the site’s origin when viewed. Af...

6.8CVSS5.3AI score0.00152EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-16562

The WP Statistics WordPress plugin before 14.16.10 does not perform a capability check on a set of dashboard analytics AJAX handlers, relying only on a nonce that every authenticated user holds, allowing users with Subscriber-level access and above to disclose the site's visitor analytics data...

5.2AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago43 views

CVE-2026-16562

CVE-2026-16562 concerns the WP Statistics WordPress plugin, prior to version 14.16.10, where a set of dashboard analytics AJAX handlers do not perform a proper capability check. Instead, they rely on a nonce that is held by every authenticated user, which enables users with Subscriber-level acces...

6.5CVSS5.2AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago47 views

CVE-2026-16578

The CVE concerns the Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection WordPress plugin (before 1.4.0). A REST API endpoint does not perform a capability check, enabling unauthenticated users to retrieve the full list of registered users, including usernames, email a...

7.5CVSS5.4AI score0.00288EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago9 views

CVE-2026-16267

The Newsletters WordPress plugin before 4.16 does not restrict the classes allowed when unserialising a value taken from a public form submission, allowing unauthenticated attackers to inject arbitrary PHP objects...

5.5AI score0.00157EPSS
SaveExploits0References1
Rows per page
Query Builder