295376 matches found
PT-2026-130641
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG files from changing a link's target to a javascript: URI, which could allow users with the author role and above to bypass its SVG sanitization and perform Stored Cross-Site...
PT-2026-130640
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...
PT-2026-130658
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone number, e-mail address and submitter name stored with links that the settings set...
PT-2026-130644
Name of the Vulnerable Software and Affected Versions LogixFast Auth versions prior to 1.0.4 Description An issue in the password reset process allows unauthenticated attackers to take over any account, including those with administrator privileges. The plugin fails to send the one-time...
PT-2026-132167
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm lms step parameter passed to the stm lms import sample data AJAX...
PT-2026-130635
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings before rendering them on the public booking form, allowing high-privilege users such as administrators to inject JavaScript that executes in the browser of any visitor who loads...
CVE-2026-110504: Unknown: The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content…
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storing and serving them as SVG images, which could allow users with the author role and above to perform Stored Cross-Site Scripting attacks...
CVE-2026-113387: canva ortto: The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a…
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary scripts...
Razorpay Payment Button Elementor Plugin cross-site scripting vulnerability
The Razorpay Payment Button Elementor Plugin versions 1.2.8 and earlier contain a cross-site scripting vulnerability, which stems from unauthenticated cross-site scripting attacks...
Canva ortto authorization issue vulnerability
Versions of Canva Ortto prior to 1.0.25 contain an authorization issue vulnerability. This vulnerability arises from the lack of authentication for configuration update requests; it relies solely on a key exposed in public HTML, potentially allowing unauthenticated attackers to override plugin...
CVE-2026-114270: Unknown GeoDirectory: The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing,…
The GeoDirectory WordPress plugin before 2.8.197 does not honour post password protection when rendering a listing, allowing unauthenticated users to disclose the content and custom fields of published listings that are protected by a post password...
CVE-2026-80069: Stylemix MasterStudy LMS WordPress Plugin: MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any…
MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, including Subscribers, to trigger the stmlmssendtestemailajax AJAX action without capability or nonce validation. Attackers can invoke this handler directly or via...
CVE-2026-54866: Razorpay Razorpay Payment Button Elementor Plugin: Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions.
Unauthenticated Cross Site Scripting XSS in Razorpay Payment Button Elementor Plugin = 1.2.8 versions...
CVE-2026-116866: Dotstore Extra Fees Plugin for WooCommerce: Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.
Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce = 4.4.0 versions...
CVE-2026-114173: canva ortto: The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public…
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected store...
CVE-2026-110505: Unknown: The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG…
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG files from changing a link's target to a javascript: URI, which could allow users with the author role and above to bypass its SVG sanitization and perform Stored Cross-Site...
CVE-2026-105258: Unknown Appointment Booking Plugin: The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings…
The Appointment Booking Plugin WordPress plugin before 5.7.6 does not escape several booking-form step content settings before rendering them on the public booking form, allowing high-privilege users such as administrators to inject JavaScript that executes in the browser of any visitor who loads...
PT-2026-135355
Name of the Vulnerable Software and Affected Versions PayHere Payment Gateway WordPress plugin versions 2.4.0 through 2.4.5 Description This issue occurs because the plugin fails to verify the authenticity of payment notifications when the merchant secret is unset, which is the default...
PT-2026-132098
The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to, and including, 9.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attacke...
PT-2026-132458
OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugins/catalog/ is not restricted to the root namespace. Attackers can remove existing registrations, create invalid ones,...