Lucene search
+L

588510 matches found

ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-65523

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

7.5CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday15 views

CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...

7.5CVSS
SaveExploits0References1
CVE
CVE
added yesterday17 views

CVE-2026-65517

The connected documents confirm a vulnerability in the WordPress plugin “Easy PayPal Buy Now Button” affecting versions up to 2.0.4, described as Unauthenticated Cross Site Scripting (XSS). No details on the root cause, exploit method, affected components beyond the plugin, impact metrics, or ava...

7.1CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-53968

Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...

7.1CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added yesterday19 views

CVE-2026-65515

The CVE-2026-65515 entry concerns the WordPress AffiliateWP plugin, affected version

7.1CVSS5.4AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday6 views

CVE-2026-65507

Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...

9.8CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday15 views

CVE-2026-65507 WordPress AIWU plugin <= 1.5.6 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in AIWU = 1.5.6 versions...

9.8CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday19 views

CVE-2026-65508 WordPress Simply Schedule Appointments plugin <= 1.6.12.10 - SQL Injection vulnerability

Unauthenticated SQL Injection in Simply Schedule Appointments = 1.6.12.10 versions...

9.3CVSS
SaveExploits0References1
CVE
CVE
added yesterday19 views

CVE-2026-65504

CVE-2026-65504 describes an unauthenticated broken access control in the WordPress BOX NOW Delivery Croatia plugin, vulnerable in versions

7.5CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-53962

Unauthenticated Broken Access Control in BOX NOW Delivery Croatia = 3.3.0 versions...

7.5CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added yesterday16 views

CVE-2026-65502

CVE-2026-65502 applies to the WordPress Element Pack Elementor Addons plugin (versions

5.3CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-53961

Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons = 8.7.13 versions...

5.3CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added yesterday12 views

CVE-2026-61964

The CVE concerns WordPress Ninja Tables plugin

7.1CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-61982 WordPress SiteGuard WP Plugin plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SiteGuard WP Plugin = 1.8.6 versions...

7.1CVSS
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-61963 WordPress Media LIbrary Assistant plugin <= 3.38 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Media LIbrary Assistant = 3.38 versions...

7.1CVSS
SaveExploits0References1
CVE
CVE
added yesterday16 views

CVE-2026-61963

WordPress Media Library Assistant plugin ≤ 3.38 has an unauthenticated XSS vulnerability. The CVE and connected records describe unauthenticated cross-site scripting in versions up to 3.38. No root-cause, exploit details, or remediation are provided in the documents; further specifics on impact a...

7.1CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday5 views

EUVD-2026-53957

Unauthenticated Cross Site Scripting XSS in EmbedPress = 4.5.6 versions...

7.1CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added yesterday18 views

CVE-2026-32548

CVE-2026-32548 describes an unauthenticated broken access control in the WordPress WordPress SureCart plugin, affected versions up to 4.6.2. The vulnerability is characterized by unauthenticated access with low confidentiality impact and no impact on integrity or availability, per CVSS 3.1 metric...

5.3CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-53955

Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...

5.3CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday15 views

CVE-2026-32548 WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...

5.3CVSS
SaveExploits0References1
Rows per page
Query Builder