295318 matches found
CVE-2026-87856 Subscriptions for WooCommerce 2.0.0 - 2.1.0 - Unauthenticated Membership Content Restriction Bypass
The Subscriptions for WooCommerce WordPress plugin before 2.1.1 only enforces its membership content restrictions on standard front-end page views, allowing unauthenticated users to read the full contents of restricted posts and pages through other routes that render the same content...
CVE-2026-86795
The Community Events WordPress plugin, in versions prior to 1.6.0 , is vulnerable to an unauthenticated information disclosure flaw. The root cause is a lack of authorization or nonce checks in one of its AJAX actions, specifically identified as ajax_admin_event_list. This allows unauthenticated ...
CVE-2026-86442 WP Event Manager 3.4.0 - 3.4.1 - Unauthenticated Unpublished Post Overwrite via IDOR
The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to conver...
CVE-2026-86795 Community Events < 1.6.0 - Unauthenticated Pending Events Disclosure via ajax_admin_event_list
The Community Events WordPress plugin before 1.6.0 does not have authorisation or nonce checks in one of its AJAX actions, allowing unauthenticated users to retrieve details of event submissions awaiting moderation, which are not available anywhere on the public site...
CVE-2026-85351
The FV Flowplayer Video Player WordPress plugin versions prior to 7.5.56.7212 is vulnerable to Server-Side Request Forgery (SSRF) . The flaw exists because the plugin fails to validate user-supplied URLs before performing a server-side fetch. If the response body is stored and served publicly, us...
CVE-2026-86442
The WP Event Manager WordPress plugin, in versions before 3.4.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The plugin fails to validate the ownership or post type of user-supplied post identifiers during its front-end event submission flow. This allows unauthenticated att...
CVE-2026-16304
The WP Event Manager WordPress plugin (versions before 3.4.2 ) contains a vulnerability where it fails to properly validate the ownership or type of user-supplied post identifiers within its frontend forms. This allows any user with a Subscriber account or higher to reassign authorship of arbitra...
CVE-2026-19256
The All In One Login WordPress plugin (versions prior to 2.5.0 ) contains an unauthenticated account takeover vulnerability. The root cause is that the default-enabled passwordless email login does not adequately restrict the number of attempts against the short numeric code and fails to log thes...
CVE-2026-16304 WP Event Manager < 3.4.2 - Subscriber+ Arbitrary Post Takeover via event_organizer_ids
The WP Event Manager WordPress plugin before 3.4.2 does not properly validate ownership or the type of the user-supplied post identifiers processed by one of its frontend forms, allowing any user with a Subscriber account or above to reassign the authorship of arbitrary posts to themselves and to...
EUVD-2026-117334
The All In One Login WordPress plugin before 2.5.0 does not adequately restrict the number of attempts that can be made against the short numeric code used by its default-enabled passwordless email login, and does not feed those failed attempts into its own brute-force protection, allowing...
CVE-2026-93389
The LiteSpeed Cache plugin for WordPress is vulnerable to unauthenticated disclosure of sensitive WooCommerce customer data in all versions up to, and including, 7.9.1 With Cache REST enabled the shipped default cache-rest=1, LiteSpeed stores WooCommerce Store API GET responses /wc/store/v1/cart...
CVE-2026-118193
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the donordefaultuserrole parameter. This is due to the sanitizeoptiondonordefaultuserrole function applying only a narrow literal check...
CVE-2026-116617
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...
EUVD-2026-117328
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'multimedia' Field Array Key in all versions due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject...
EUVD-2026-117329
The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via themeopts Parameter via User Profile in all versions up to, and including, 4.5.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2026-117330
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the donordefaultuserrole parameter. This is due to the sanitizeoptiondonordefaultuserrole function applying only a narrow literal check...
CVE-2026-116617
The Motors – Car Dealership & Classified Listings Plugin for WordPress is vulnerable to File Deletion in all versions up to and including 1.4.128 . The flaw exists because the stm_save_user_extra_fields() function writes the attacker-controlled stm_dealer_logo_path parameter directly to user meta...
CVE-2026-116617 Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameter
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...
EUVD-2026-117327
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to File Deletion in all versions up to, and including, 1.4.128 The vulnerability exists because stmsaveuserextrafields, hooked to personaloptionsupdate, writes the attacker-controlled stmdealerlogopath...