16337 matches found
CVE-2024-11635
WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...
WordPress BEAR plugin < 1.2.2 - Taxonomy Term Modification vulnerability
Taxonomy Term Modification vulnerability discovered by Ali Mousavi in WordPress Plugin BEAR versions 1.2.2...
WordPress AI Builder plugin 2.4.1-2.7.7 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by md. minaruzzaman shovon in WordPress Plugin AI Builder versions 2.4.1-2.7.7...
CVE-2026-81791
Subscriber Cross Site Scripting XSS in EventON = 2.5.7 versions...
WordPress Quentn WP plugin < 1.2.15 - Admin+ SQLi vulnerability
Admin+ SQLi vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Quentn WP versions 1.2.15...
Atarim < 4.2.2 - Sensitive Information Exposure
Vito Peleg Atarim = 4.2 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve embedded sensitive data remotely, exploit requires no special privileges. id: CVE-2025-60188 info: name: Atarim...
WordPress Pods plugin 3.3-3.3.9.1 - Author+ Arbitrary File Read vulnerability
Author+ Arbitrary File Read vulnerability discovered by Erwan LR WPScan in WordPress Plugin Pods versions 3.3-3.3.9.1...
CVE-2026-81282
Subscriber Cross Site Scripting XSS in Product Variations Swatches for WooCommerce = 1.1.18 versions...
WordPress Booking and Rental Manager plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by sungbyeongchan in WordPress Plugin Booking and Rental Manager versions = 2.7.7...
CVE-2026-84760
Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce = 3.2.9 versions...
WordPress Rentsyst plugin <= 2.1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by benzdeus in WordPress Plugin Rentsyst versions = 2.1.3...
WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by V1T in WordPress Plugin Gallery PhotoBlocks versions = 1.3.4...
PT-2026-84785
Jenkins LDAP Plugin 807.809.vd3a 4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL...
CVE-2026-81768 WordPress Super Store Finder plugin <= 7.10 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Store Finder = 7.10 versions...
WordPress Newsletters plugin < 4.17 - Unauthenticated API Access vulnerability
Unauthenticated API Access vulnerability discovered by Erwan LR WPScan in WordPress Plugin Newsletters versions 4.17...
WordPress Tutor LMS plugin < 4.0.6 - Instructor+ Arbitrary File Read vulnerability
Instructor+ Arbitrary File Read vulnerability discovered by Sai Praneeth Koti in WordPress Plugin Tutor LMS versions 4.0.6...
CVE-2026-78281 WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in CP Media Player = 1.3.0 versions...
WordPress Eventin plugin < 4.1.22 - Unauthenticated Unpublished Content Disclosure vulnerability
Unauthenticated Unpublished Content Disclosure vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin WP Event SOlution versions 4.1.22...
