CVE-2026-62134

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62111

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62110

Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection in the task synthesis, which interpolates configuration properties and auto-discovered file names into the generated .projen/tasks.json without escaping shell metacharacters, affecting properties including extraArgs,...

CVE-2026-62138

A Contributor-level Cross Site Scripting (XSS) vulnerability affects the Visual Composer Website Builder WordPress plugin in versions ≤ 45.16.1 . The flaw, discovered by sungbyeongchan, allows an attacker with Contributor privileges to inject malicious scripts via user interaction. The CVSS 3.1 s...

CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62138 WordPress Visual Composer Website Builder plugin <= 45.16.1 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

EUVD-2026-76199

Contributor Cross Site Scripting XSS in Visual Composer Website Builder = 45.16.1 versions...

CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62134 WordPress Starter Templates plugin <= 4.7.5 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62134

An Insecure Direct Object References (IDOR) vulnerability was identified in the WordPress Starter Templates plugin (versions ≤ 4.7.5 ). The flaw allows a contributor-level authenticated user to manipulate objects they should not have access to, resulting in a low integrity impact (CVSS 4.3, MEDIU...

EUVD-2026-76203

Contributor Insecure Direct Object References IDOR in Starter Templates = 4.7.5 versions...

CVE-2026-62113

CVE-2026-62113 is an Insecure Direct Object References (IDOR) vulnerability in the WordPress plugin Slim SEO (versions

EUVD-2026-76207

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-62111

CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...

CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...

EUVD-2026-76209

Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...