BELL-CVE-2026-64320

Bulletin has no description...

BELL-CVE-2026-64305

Bulletin has no description...

BELL-CVE-2026-64331

Bulletin has no description...

BELL-CVE-2026-64318

Bulletin has no description...

BELL-CVE-2026-64271

Bulletin has no description...

BELL-CVE-2026-64270

Bulletin has no description...

BELL-CVE-2026-64273

Bulletin has no description...

BELL-CVE-2026-64266

Bulletin has no description...

BELL-CVE-2026-64219

Bulletin has no description...

BELL-CVE-2026-64237

Bulletin has no description...

BELL-CVE-2026-64233

Bulletin has no description...

BELL-CVE-2026-64225

Bulletin has no description...

BELL-CVE-2026-64217

Bulletin has no description...

BELL-CVE-2026-64223

Bulletin has no description...

CVE-2026-14234

This entry describes a stored XSS vulnerability in the WOLF WordPress plugin before version 1.1.0. The issue arises because an AJAX action does not perform a nonce or capability check, allowing an unauthenticated attacker to trick a logged-in administrator into posting arbitrary content, includin...

CVE-2026-14234 WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF

The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administrator into writing arbitrary content, including a malicious script, into a post via a cross-site request, resulting in...

EUVD-2026-50120

The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administrator into writing arbitrary content, including a malicious script, into a post via a cross-site request, resulting in...

CVE-2026-14234

The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administrator into writing arbitrary content, including a malicious script, into a post via a cross-site request, resulting in...

CVE-2026-64554

No description is available for this CVE...

CVE-2026-5626

The Survey Form Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getalldata function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export a...