589434 matches found
CVE-2026-17017
The CVE-2026-17017 entry concerns the CubeWP Framework WordPress plugin prior to version 1.1.31. The vulnerability arises from insufficient sanitization/escaping of a parameter used in an SQL statement within an AJAX action and the absence of a capability check on that action. This combination al...
CVE-2026-18473
Affected product: WP Directory Kit WordPress plugin prior to 1.5.5. Vulnerable component: parameter handling in field_search where input is unsafely used in a SQL statement. Root cause: insufficient sanitisation/escaping leading to SQL injection. Impact: unauthenticated attackers can exploit the ...
EUVD-2026-54876
The Create WordPress plugin before 2.5.4 does not perform an authorization check before rendering content over one of its public REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to mak...
EUVD-2026-54877
The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does not perform authorisation or nonce checks in one of its reporting features, allowing unauthenticated attackers to retrieve sensitive order data belonging to any customer of the store, such as billing names, order IDs and statuse...
EUVD-2026-54879
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not properly validate a user-controlled path before using it in a file inclusion, allowing unauthenticated attackers to include...
CVE-2026-18464
The CVE‑2026‑18464 entry concerns the WP MAPS PRO WordPress plugin prior to 6.1.3. A capability check is missing in an AJAX action that is accessible to unauthenticated users, and the dispatched operation is not restricted. This allows unauthenticated attackers to trigger uncontrolled recursion, ...
EUVD-2026-54880
The WP Directory Kit WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users...
CVE-2026-18603
The CVE concerns the PiWeb Cancel order / Refund request plugin for WooCommerce (WordPress) prior to version 1.3.4.34. The issue is a lack of authorization/ownership checks when adding contents of a previous order to the cart, enabling unauthenticated users to disclose other customers’ order cont...
EUVD-2026-54878
The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capability check in one of its AJAX actions, which is also available to unauthenticated users, and does not restrict the operation it dispatches, allowing unauthenticated attackers to trigger uncontrolled recursion that exhausts...
CVE-2026-18465
The CVE refers to the WP MAPS PRO WordPress plugin (pre-6.1.3) where an AJAX action, reachable without authentication, lacks a capability check and improperly validates a user-controlled path before a file inclusion. This enables unauthenticated attackers to include and execute arbitrary existing...
CVE-2026-18037
The CVE concerns the Create WordPress plugin (before 2.5.4). A public REST API route does not perform an authorization check, and renders content while also publishing it as a side effect, allowing unauthenticated disclosure of unpublished content and public publication of that content. Affected:...
CVE-2026-18357
The CVE-2026-18357 affects the WPC Order Tip for WooCommerce WordPress plugin prior to version 3.3.1. The vulnerability arises because a reporting feature does not perform authorization or nonce checks, allowing unauthenticated access to sensitive customer order data such as billing names, order ...
CVE-2026-17011
The vulnerability CVE-2026-17011 affects the Nexter Blocks WordPress plugin prior to version 5.0.2. The root cause is that the REST endpoint used to save global CSS does not restrict who can perform the action, allowing users with at least the Contributor role to store arbitrary CSS. This CSS is ...
EUVD-2026-54893
The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public REST endpoint actions, allowing unauthenticated users to delete the generated album export ZIP archives it stores...
EUVD-2026-54891
The Create WordPress plugin before 2.5.4 does not perform an authorization check before returning content over one of its REST API routes, and that route additionally publishes the requested content as a side effect, allowing unauthenticated attackers to read unpublished content and to make it...
EUVD-2026-54895
The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected...
CVE-2026-18032
The CVE-2026-18032 entry concerns the WP Data Access WordPress plugin prior to version 5.5.79. Affected component is an unauthenticated AJAX action where column-name validation is inadequate and the action’s nonce protection does not cover the column names. This permits an unauthenticated attacke...
CVE-2026-17044
The CVE concerns the Iptanus File Upload WordPress plugin, affected if using versions before 5.1.8. The underlying issue is improper sanitisation/escaping of a parameter prior to its use in a SQL statement, enabling an SQL injection by unauthenticated users. This is confirmed across the NVD/NVD-d...
CVE-2026-16992
The CVE-2026-16992 entry concerns the Create WordPress plugin (before 2.5.4). A REST API route does not perform an authorization check and, as a side effect, returns the requested content, enabling unauthenticated attackers to read unpublished content and to publish it publicly. The available sou...