588502 matches found
CVE-2026-65504
CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions
EUVD-2026-53962
Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...
CVE-2026-65502
CVE-2026-65502 applies to the WordPress Element Pack Elementor Addons plugin (versions
EUVD-2026-53961
Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...
CVE-2026-61964
The CVE concerns WordPress Ninja Tables plugin
CVE-2026-61982 WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...
CVE-2026-61963 WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...
CVE-2026-61963
WordPress Media Library Assistant plugin ≤ 3.38 has an unauthenticated XSS vulnerability. The CVE and connected records describe unauthenticated cross-site scripting in versions up to 3.38. No root-cause, exploit details, or remediation are provided in the documents; further specifics on impact a...
EUVD-2026-53957
Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...
CVE-2026-32548
CVE-2026-32548 describes an unauthenticated broken access control in the WordPress WordPress SureCart plugin, affected versions up to 4.6.2. The vulnerability is characterized by unauthenticated access with low confidentiality impact and no impact on integrity or availability, per CVSS 3.1 metric...
EUVD-2026-53955
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
CVE-2026-32548 WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
CVE-2026-28180
The CVE describes an unauthenticated Insecure Direct Object References (IDOR) vulnerability in the Mercado Pago payments for WooCommerce plugin for WordPress, affecting versions
CVE-2026-28169
CVE-2026-28169 concerns unauthenticated sensitive data exposure in the WordPress plugin YITH WooCommerce Zoom Magnifier (versions
EUVD-2026-53944
Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...
EUVD-2026-53945
Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...
CVE-2026-28140 WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in JetFormBuilder = 3.6.4.1 versions...
CVE-2026-28140
CVE-2026-28140 affects the WordPress JetFormBuilder plugin (versions ≤ 3.6.4.1). The vulnerability is an unauthenticated Broken Access Control, with an impact stated as high in the CVSS metrics (I=HIGH, C=NONE, A=NONE) while no confidentiality impact and no availability impact. The available docu...
EUVD-2026-53943
Unauthenticated Broken Access Control in JetFormBuilder = 3.6.4.1 versions...
CVE-2026-28082
CVE-2026-28082 affects the WordPress JetEngine plugin up to version 3.8.13.1, describing an unauthenticated Cross Site Scripting (XSS) vulnerability. The connected sources confirm the vulnerability existence and affected product/version but do not provide concrete technical details such as the ex...