32 matches found
CVE-2026-95604
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
CVE-2026-95604
The Loops & Logic WordPress plugin is vulnerable to an unauthenticated Broken Access Control flaw in versions
CVE-2026-95604 WordPress Loops & Logic plugin <= 4.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
CVE-2026-95604 WordPress Loops & Logic plugin <= 4.2.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
EUVD-2026-85507
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
WordPress Loops & Logic plugin <= 4.2.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by K. Sorrachat in WordPress Plugin Loops & Logic versions = 4.2.4...
PT-2026-97492
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
CVE-2026-95604: Missing Authorization
Unauthenticated Broken Access Control in Loops & Logic = 4.2.4 versions...
WordPress Loops & Logic plugin <= 4.3.1 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Joshua Martinelle in WordPress Plugin Loops & Logic versions = 4.3.1...
WordPress Loops & Logic plugin < 4.3.0 - Unauthenticated User Data and Site Option Disclosure vulnerability
Unauthenticated User Data and Site Option Disclosure vulnerability discovered by Philipp Doblhofer in WordPress Plugin Loops & Logic versions 4.3.0...
CVE-2026-16960
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
EUVD-2026-74701
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
CVE-2026-16960 Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
CVE-2026-16960 Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
CVE-2026-16960
The Loops & Logic WordPress plugin (versions before 4.3.0 ) contains a vulnerability where the public template-data action fails to restrict data access to authorized visitors. This oversight allows unauthenticated users to read arbitrary user records , including sensitive information such as ema...
CVE-2026-16960: Exposure of Sensitive Information to an Unauthorized Actor
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
PT-2026-88858
The Loops & Logic WordPress plugin before 4.3.0 does not restrict its public template-data action to the data a visitor is permitted to see, allowing unauthenticated users to read arbitrary user records including email addresses and roles and arbitrary site options...
CVE-2026-82123
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Tangible Loops & Logic...
CVE-2026-82123
CVE-2026-82123 is a reflected cross-site scripting (XSS) vulnerability in the Tangible Loops & Logic WordPress plugin, caused by improper neutralization of input during web page generation. Per the assigned CVSS 3.1 score of 6.5 (Medium) , the attack vector is network-based with low complexity, r...