CVE-2026-0813

The Short Link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortlinkposttitle' and 'shortlinkpagetitle' parameters in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

CVE-2024-13318: Deletion of Data Structure Sentinel

The Essential WP Real Estate plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the cldeletelistingfunc function in all versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to delete arbitrary pages and posts...

PT-2024-17198

Name of the Vulnerable Software and Affected Versions AI Post Generator | AutoWriter plugin for WordPress versions up to, and including, 3.5 Description The issue is related to a missing capability check on the ai post generator delete Post AJAX action. This allows authenticated attackers with...

PT-2024-27103 · WordPress · Wp Scraper

Name of the Vulnerable Software and Affected Versions: WP Scraper plugin for WordPress versions up to, and including, 5.7 Description: The issue is related to unauthorized access due to a missing capability check on the wp scraper multi scrape action function. This allows authenticated attackers...