CVE-2026-67860

A flaw was found in open62541, an open-source OPC UA Open Platform Communications Unified Architecture toolkit. This vulnerability is a heap-based buffer overflow occurring in the default HistoryRead path when the default history database uses a memory backend. An attacker could exploit this to...

CVE-2026-19077

The CVE concerns the Duplicate Post WordPress plugin prior to 1.5.5, which fails per-object authorization checks during bulk copy and delete. This allows any user whose role an administrator has granted access to perform permanent deletion of arbitrary posts, including others’ posts. Root cause: ...

CVE-2026-19077

The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5.5 access to permanently delete arbitrary posts on the site...

EUVD-2026-55000

The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5.5 access to permanently delete arbitrary posts on the site...

EUVD-2026-55001

The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remot...

CVE-2026-19089

The affected product is the Product Input Fields for WooCommerce WordPress plugin. The vulnerability stems from the plugin not validating uploaded file types when the accepted-types setting is left empty, contradicting its documentation that it accepts all files. This allows unauthenticated attac...

CVE-2026-18200

The CVE covers the FoodBoxBooker WordPress plugin before 1.0.8, where the application does not verify that the user account being updated belongs to the requesting user. This allows authenticated users with Subscriber-level access and above to modify the profile details of arbitrary users, includ...

CVE-2026-15238

The CVE concerns the MotoPress Hotel Booking WordPress plugin prior to version 6.2.3. It lacks ownership verification when updating customer records, enabling any authenticated user with a low-privilege role (Subscriber and above) to modify or overwrite personal data of any customer by supplying ...

EUVD-2026-55016

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account Subscriber and above to modify or overwrite the personal data of any customer by supplying an arbitrary...

CVE-2026-14860

The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to make the server issue requests to arbitrary hosts and read back responses that parse as RSS/XML...

EUVD-2026-55017

The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arbitrary bookings and falsely mark them as paid...

EUVD-2026-55019

The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to make the server issue requests to arbitrary hosts and read back responses that parse as RSS/XML...

CVE-2026-12971

The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bounded server-side request forgery...

CVE-2026-13170

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-12971

CVE-2026-12971 affects the LearnPress WordPress plugin prior to version 4.4.4. The vulnerability arises because the plugin does not validate a user-supplied URL before the server fetches it, enabling a user with the instructor role to trigger the server to issue requests to arbitrary external hos...

CVE-2026-17018

The CVE-2026-17018 issue affects the CubeWP Framework WordPress plugin (

EUVD-2026-55036

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

EUVD-2026-55035

The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-17540

The CVE concerns the WordPress File Manager plugin prior to version 6.9.1. The issue is improper authorization for file management commands, enabling any authenticated user (e.g., a subscriber) to read and delete arbitrary files within the WordPress installation directory. This could lead to disc...

WordPress Super Forms <= 6.3.313 - Arbitrary File Upload

Super Forms – Drag & Drop Form Builder WordPress plugin \u003C= 6.3.313 contains an arbitrary file upload vulnerability caused by missing file type validation and lack of capability checks in submitform nopriv AJAX handler, letting unauthenticated attackers upload executable files and achieve...