295284 matches found
CVE-2026-113387
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary scripts...
EUVD-2026-112505
Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10 fail to validate the target post ID in the Agents plugin's mention reminder component, which allows an authenticated user who can post in a channel visible to a system administrator to cause the administrator's browser to send...
PT-2026-130658
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone number, e-mail address and submitter name stored with links that the settings set...
PT-2026-132167
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm lms step parameter passed to the stm lms import sample data AJAX...
CVE-2026-110504: Unknown: The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content…
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...
CVE-2026-108685: Unknown WP Post Author: The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its…
The WP Post Author WordPress plugin before 4.2.0 does not check that the account was created before updating its profile during front-end registration, allowing unauthenticated users to overwrite the display name, nickname and website of the first user account, which is normally the administrator...
VulnCheck KEV: CVE-2024-10441
Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS BSM before 1.1-65374 and Synology DiskStation Manager DSM before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors...
PT-2026-130644
Name of the Vulnerable Software and Affected Versions LogixFast Auth versions prior to 1.0.4 Description An issue in the password reset process allows unauthenticated attackers to take over any account, including those with administrator privileges. The plugin fails to send the one-time...
CVE-2026-113387: canva ortto: The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a…
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary scripts...
PT-2026-130641
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG files from changing a link's target to a javascript: URI, which could allow users with the author role and above to bypass its SVG sanitization and perform Stored Cross-Site...
WordPress Extra Fees Plugin for WooCommerce deserialization injection vulnerability
WordPress Extra Fees Plugin for WooCommerce versions 4.4.0 and earlier contain a deserialization injection vulnerability, which stems from PHP object injection...
PT-2026-130635
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings before rendering them on the public booking form, allowing high-privilege users such as administrators to inject JavaScript that executes in the browser of any visitor who loads...
Razorpay Payment Button Elementor Plugin cross-site scripting vulnerability
The Razorpay Payment Button Elementor Plugin versions 1.2.8 and earlier contain a cross-site scripting vulnerability, which stems from unauthenticated cross-site scripting attacks...
PT-2026-130640
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...
PT-2026-132273
Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...
CVE-2026-116866: Dotstore Extra Fees Plugin for WooCommerce: Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...
Apache Struts2 JSON Deserialization Memory Exhaustion / Denial of Service
Apache Struts2's JSON plugin is reportedly susceptible to denial of service attacks through excessive memory allocation during deserialization of deeply nested JSON arrays. Despite the introduction of input length, nesting depth, and element count restrictions in WW-5618 and S2-072, the parser...
Apache Struts2 JSON Deserialization Denial of Service Hardening Bypass
Apache Struts2's JSON plugin is reportedly susceptible to denial of service conditions due to insufficient resource consumption controls during recursive JSON deserialization. Despite the introduction of depth, element count, and input length restrictions through WW-5618 and S2-072, the...
CVE-2026-80069: Stylemix MasterStudy LMS WordPress Plugin: MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any…
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...
VulnCheck KEV: CVE-2026-96662
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'bookingserviceid' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of...