231719 matches found
CVE-2026-66684
The CVE-2026-66684 entry concerns the WordPress plugin Export Import Menus, affected versions ≤ 1.9.2. The vulnerability is an unauthenticated sensitive data exposure in the export/import functionality. No concrete exploit details, affected files, root cause, or remediation are provided in the av...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66665 WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...
CVE-2026-66665
The vulnerability affects the WordPress Type Hub plugin ≤ 2.0.6, with an Unauthenticated Arbitrary File Upload . The root cause is not explicitly stated in the provided documents. Impact is described as critical (CVSSv3.1: 10.0, Network, No auth, Privileges none, Scope Changed, C/I/A HIGH). Explo...
EUVD-2026-53890
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
CVE-2026-66664
CVE-2026-66664 : Unauthenticated XSS in the WordPress plugin “SEO Plugin by Squirrly SEO” (versions
CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-66662
CVE-2026-66662 concerns an Unauthenticated Privilege Escalation in the WordPress plugin Frontend Admin by DynamiApps targeting versions up to 3.29.10 . Affected component is the plugin’s frontend admin functionality; the underlying cause is not detailed in the provided documents beyond the unauth...
CVE-2026-66662 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66470 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66470
The CVE-2026-66470 entry affects the WordPress plugin “Frontend Admin by DynamiApps” versions up to 3.29.10 (
CVE-2026-66457
CVE-2026-66457 describes an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress Events Manager plugin version ≤ 7.4.1. The issue is identified as an XSS flaw; no root-cause specifics are provided in the documents. Exploitation status and precise impact vectors are not detail...
CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66451
CVE-2026-66451 affects the WordPress plugin WP Event Solution (
CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
CVE-2026-66440 WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPIDE – File Manager & Code Editor = 3.5.7 versions...
CVE-2026-66425 WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-66425
Technical details are not publicly available in the provided documents. Monitor for updates from the listed sources.