234073 matches found
CVE-2026-65562 WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BetterDocs = 4.6.2 versions...
CVE-2026-65563
CVE-2026-65563 concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Orbit Fox by ThemeIsle plugin, versioned
CVE-2026-65563 WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in Orbit Fox by ThemeIsle = 3.0.7 versions...
EUVD-2026-49234
Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...
CVE-2026-65561 WordPress WordPress Social Login and Register plugin <= 7.8.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.0 versions...
CVE-2026-65561
CVE-2026-65561 concerns the WordPress WordPress Social Login and Register plugin (versions
CVE-2026-65558 WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in AffiliateX = 2.3.5 versions...
CVE-2026-65557
Shop manager Cross Site Scripting XSS in Abandoned Cart Lite for WooCommerce = 6.8.0 versions...
CVE-2026-65557
CVE-2026-65557 concerns the WordPress plugin Abandoned Cart Lite for WooCommerce (versions <= 6.8.0), where a Cross Site Scripting (XSS) flaw affects the shop-manager context. The connected records confirm the affected product (WordPress WooCommerce plugin), the vulnerability type (XSS), and t...
CVE-2026-65436
CVE-2026-65436 affects the WordPress Kirki plugin up to version 6.0.13, with an Editor component vulnerability described as Arbitrary File Deletion. The connected data confirms the affected software/component and the nature of the vulnerability, but does not provide technical steps, exploit detai...
CVE-2026-65435 WordPress Thrive Leads Version plugin <= 10.9.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Thrive Leads Version = 10.9.2 versions...
CVE-2026-65435
The CVE-2026-65435 entry concerns the WordPress Thrive Leads plugin (versions <= 10.9.2) with an Unauthenticated Broken Access Control vulnerability. The affected component is Thrive Leads Version
CVE-2026-65434 WordPress ЮKassa для WooCommerce plugin <= 2.16.1 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in ЮKassa для WooCommerce = 2.16.1 versions...
CVE-2026-59560
The CVE-2026-59560 pertains to the WordPress FundEngine plugin (affected: FundEngine
CVE-2026-65433
CVE-2026-65433 concerns the WordPress plugin “RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg” (versions
CVE-2026-59560 WordPress FundEngine plugin <= 1.7.8 - Broken Access Control vulnerability
Subscriber Broken Access Control in FundEngine = 1.7.8 versions...
CVE-2026-59559 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg = 1.5.1 versions...
CVE-2026-59559
The CVE concerns a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg”, version
CVE-2026-59558
The CVE-2026-59558 entry documents an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Booking Calendar plugin, affected versions <= 11.4.2. The issue concerns the Booking Calendar component/functionality and is characterized by unauthenticated XSS, allowing an attacke...