16234 matches found
CVE-2026-14195
Summary: CVE-2026-14195 affects the Brizy WordPress plugin prior to 2.8.18. The issue is an authorization check gap on a request handler that returns post content, allowing users with the Contributor role or higher to read arbitrary posts, including private, pending, and draft posts from other us...
WordPress Podlove Podcast Publisher plugin < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion vulnerability
Podcast Contributor/Group/Role Creation and Deletion vulnerability discovered by Ryan Fabella in WordPress Plugin Podlove Podcast Publisher versions 4.5.3...
CVE-2026-14195
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
WordPress Brizy plugin < 2.8.18 - Contributor+ Sensitive Information Disclosure vulnerability
Contributor+ Sensitive Information Disclosure vulnerability discovered by Mustafa Ahmed in WordPress Plugin Brizy versions 2.8.18...
CVE-2026-13729
The CVE concerns the Podlove Podcast Publisher WordPress plugin prior to version 4.5.3. The vulnerability is a CSRF (forged request) flaw caused by missing nonce validation on certain administrative create and delete actions, enabling an attacker to create rogue records or delete legitimate ones ...
CVE-2026-14195 Brizy – Page Builder < 2.8.18 - Contributor+ Sensitive Information Disclosure via get_post_info
The Brizy WordPress plugin before 2.8.18 does not properly verify authorization on a request handler before returning post content, allowing users with the Contributor role or higher to read the content of arbitrary posts, including other users' private, pending, and draft posts...
CVE-2026-10827
The CVE-2026-10827 entry concerns Spectra Legacy (WordPress) plugin prior to 2.20.0. The vulnerability is a CSS-injection flaw: the plugin fails to validate/escape several block-style attributes used to build front-end CSS. With Contributor+ privileges, an attacker can inject arbitrary CSS that i...
EUVD-2026-51696
The Spectra Legacy WordPress plugin before 2.20.0 does not validate or escape several block style attributes before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into the pages that render the affected block. Th...
CVE-2026-10827 Spectra (Ultimate Addons for Gutenberg) < 2.20.0 - Contributor+ Stored CSS Injection via Block Attributes
The Spectra Legacy WordPress plugin before 2.20.0 does not validate or escape several block style attributes before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into the pages that render the affected block. Th...
CVE-2026-15234
The CVE-2026-15234 vulnerability affects the WordPress plugin Codeless Page Builder (≤ 1.1.4). The underlying issue is that a shortcode attribute is not sanitized/validated before being used as an HTML tag name during content rendering. This allows users with contributor-level access and above to...
CVE-2026-15234 Codeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode Attribute
The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, allowing users with contributor-level access and above to inject arbitrary HTML and JavaScript that executes in the session of a...
CVE-2026-15262
The CVE concerns the WordPress plugin Admin Columns for ACF Fields (vulnerable through 0.3.2). The issue is a stored XSS in the admin post-list screen: ACF field values are not escaped before being output in WordPress admin list-table columns, enabling users with contributor-level access or highe...
CVE-2026-15262 Admin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value Column
The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before outputting them in the WordPress admin list-table columns, allowing users with contributor-level access or above to store a payload that executes as JavaScript in the session of...
CVE-2026-15234
The Codeless Page Builder WordPress plugin through 1.1.4 does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, allowing users with contributor-level access and above to inject arbitrary HTML and JavaScript that executes in the session of a...
CVE-2026-15262
The Admin Columns for ACF Fields WordPress plugin through 0.3.2 does not escape Advanced Custom Fields values before outputting them in the WordPress admin list-table columns, allowing users with contributor-level access or above to store a payload that executes as JavaScript in the session of...
CVE-2026-7623
The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2026-15414
CVE-2026-15414 affects the Subscriptions for WooCommerce plugin for WordPress, is_role(), both accepting administrator, and the UI’s disabled attribute is client-side-only, enabling bypass by POST or DevTools. Because wps_membership_plan is registered with capabilty_type => 'post', any user wh...
CVE-2026-13362 SendPulse Email Marketing Newsletter <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via _sp_form_code Post Meta
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-13362
Technical details about CVE-2026-13362 are not publicly available in the provided documents. Monitor for updates; no concrete exploit vectors, affected versions, or remediation are confirmed here.
CVE-2026-13362
The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spformcode Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...