WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Frisbii Pay versions = 1.8.19...

Sandbox Bypass

Jenkins Script Security Plugin is vulnerable to sandbox bypass. The vulnerability is due to a failure to intercept operations on a null receiver, where method calls, property and attribute accesses, and array accesses are not checked, allowing attackers with permission to define and run sandboxed...

WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FV Flowplayer Video Player versions = 8.3.4...

DAMM

DAMM An open source memory analysis tool built on top of Volatility. It is meant as a proving ground for interesting new techniques to be made available to the community. These techniques are an attempt to speed up the investigation process through data reduction and codifying some expert...

CVE-2024-25092

CVE-2024-25092 Exploit Overview CVE-2024-25092 is a high-severity vulnerability affecting the WordPress NextMove Lite plugin versions = 2.17.0. This vulnerability allows a subscriber+ user to install and activate arbitrary plugins on a WordPress site due to missing authorization checks. Details...

Sandbox Bypass

Jenkins Script Security Plugin is vulnerable to sandbox bypass. The vulnerability is due to the plugin checking the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, where this...

Cross-site Scripting (XSS)

TinyMCE is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to processing elements created through data-mce-object in the active document before sanitization, which allows an attacker to inject malicious scripts that execute during media processing and cause stored XSS when the...

WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Extra Fees Plugin for WooCommerce versions = 4.4.0...

EUVD-2026-111602

The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cmb43ex1grp0txt wysiwyg field inside group — field id controlled by integrator config' parameter in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output escaping. This makes ...

CVE-2026-109384 The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...

EUVD-2026-111734

The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpasfiles' parameter in all versions up to, and including, 6.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticate...

CVE-2026-115255

The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to delete the WordPress user accounts of roster members...

CVE-2026-111577

The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuration page, which is gated only on the GoSMTP WordPress plugin before 1.2.5-activation capability, allowing users with a delegated role below administrator to change outbound ma...

CVE-2026-106003

The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentication or nonce validation on one of its AJAX actions, allowing unauthenticated users to add or delete reservation types in the Court Reservation WordPress plugin before 1.12.4's configuration...

CVE-2026-103372

The Payconiq WordPress plugin through 1.0.4 does not check that a visitor is allowed to see an order before returning its confirmation link, allowing unauthenticated users to obtain any paid order's key and, for recent guest orders, view the customer's personal details...

WordPress Customer Engagement System plugin < 2.0.2 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Popup by Supsystic versions 2.0.2...

CVE-2026-115225 Smart Popup by Supsystic < 2.0.2 - Unauthenticated SSRF via MailChimp Groups Lookup

The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied to it, allowing unauthenticated users to make the server open connections to arbitrary internal hosts and ports and infer from response...

CVE-2026-115255 WP Roster < 2.35 - Unauthenticated Roster Member Deletion

The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to delete the WordPress user accounts of roster members...

CVE-2026-115225

The Customer Engagement System WordPress plugin versions before 2.0.2 is vulnerable to an unauthenticated SSRF (Server-Side Request Forgery) via the MailChimp interest-group lookup. The root cause is the failure to restrict access to this lookup and a lack of validation for the supplied API key. ...

CVE-2026-115255

The WP Roster WordPress plugin (versions before 2.35 ) is vulnerable to an unauthenticated roster member deletion vulnerability. The flaw exists because the plugin fails to perform any capability or nonce checks on one of its AJAX actions . This allows an unauthenticated attacker to delete the Wo...