CVE-2026-16274

The Classified Listing WordPress plugin versions prior to 5.4.4 is vulnerable to unauthorized content disclosure via the rtcl_block_css_get_posts AJAX action. The root cause is a failure to perform capability or ownership checks , allowing users with contributor-level access and above to read any...

CVE-2026-16276

The Classified Listing WordPress plugin (versions before 5.4.4 ) is vulnerable to a broken access control issue in the rtcl_revenue_order_search AJAX action. The plugin fails to perform a necessary capability check , allowing users with contributor-level access and above to view aggregated daily ...

CVE-2026-16274: Missing Authorization

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability or ownership check on an AJAX action that returns a post's content, allowing users with contributor-level access and above to read the content of any post, page, or custom post type on the site — including drafts,...

CVE-2026-15260: Authorization Bypass Through User-Controlled Key

The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users' and posts' geolocation records by supplying arbitrary record IDs...

CVE-2026-12965: Improper Neutralization of Special Elements used in an SQL Command

The Super Store Finder WordPress plugin before 7.11 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

PT-2026-67022

Name of the Vulnerable Software and Affected Versions Super Store Finder WordPress plugin versions prior to 7.11 Description An unauthenticated AJAX action fails to sanitize a parameter before incorporating it into a SQL query. This allows unauthenticated attackers to execute SQL injection, a...

CVE-2026-16276: Missing Authorization

The Classified Listing WordPress plugin before 5.4.4 does not perform a capability check on an AJAX action that returns aggregated store revenue totals, allowing users with contributor-level access and above to read daily revenue figures normally restricted to administrators and report managers...

PT-2026-67069

The GEO my WP WordPress plugin before 4.5.5.3 does not perform any ownership or capability check on two of its logged-in AJAX actions, allowing users with subscriber-level access or above to modify or permanently delete other users' and posts' geolocation records by supplying arbitrary record IDs...

PT-2026-67103

Name of the Vulnerable Software and Affected Versions Classified Listing WordPress plugin versions prior to 5.4.4 Description An AJAX action that returns post content fails to perform necessary capability or ownership checks. This allows users with contributor-level access or higher to read the...

CVE-2026-16256

The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacker-supplied role value, allowing unauthenticated attackers to create a new...

CVE-2026-15241

The AI ChatBot for WooCommerce WordPress plugin before 4.8.4 does not perform any authorization or nonce check on one of its AJAX actions, allowing unauthenticated users to abuse the site owner's stored third-party API key to send requests billed to the owner's account and, when an optional featu...

CVE-2026-15385

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

CVE-2026-15151

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-16256

The POUCO Import Users WordPress plugin (versions through 1.0.0 ) is vulnerable to an unauthenticated privilege escalation flaw. The plugin fails to perform necessary capability or nonce checks on AJAX actions that allow for the creation and updating of WordPress accounts. Because the plugin trus...

CVE-2026-11872 Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

EUVD-2026-51939

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

EUVD-2026-51938

The POUCO Import Users WordPress plugin through 1.0.0 does not perform any capability or nonce checks on AJAX actions available to unauthenticated users that create and update WordPress accounts, and it trusts an attacker-supplied role value, allowing unauthenticated attackers to create a new...

CVE-2026-15385

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

CVE-2026-15385

The RT Mega Menu WordPress plugin (versions before 1.5.2 ) is vulnerable to Stored XSS due to a lack of capability checks on an AJAX action used to save mega-menu configurations and per-menu-item settings. While a nonce is present, it is accessible to any logged-in user. A user with subscriber-le...