Lucene search
+L

238413 matches found

Cvelist
Cvelist
added 2026/09/02 11:37 a.m.35 views

CVE-2026-81769 WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1...

8.8CVSS0.00286EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.13 views

CVE-2026-81769

CVE-2026-81769 is an Incorrect Privilege Assignment vulnerability in the LiquidThemes Booking Hub WordPress plugin, affecting versions up to and including 1.3.1 . The flaw allows an attacker with low privileges to escalate access, potentially compromising confidentiality, integrity, and availabil...

8.8CVSS5.9AI score0.00286EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.34 views

CVE-2026-81770 WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Interactive Geo Maps = 1.6.30 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.12 views

CVE-2026-81770

CVE-2026-81770 affects the WordPress Interactive Geo Maps plugin in versions ≤ 1.6.30 . The vulnerability is an unauthenticated Reflected Cross-Site Scripting (XSS) , meaning no prior login is required to exploit it, though user interaction is needed (CVSS 3.1: 7.1 HIGH , vector AV:N/AC:L/PR:N/UI...

7.1CVSS5.9AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.22 views

CVE-2026-81294

CVE-2026-81294 is an unauthenticated privilege escalation vulnerability in the WordPress Authorizer plugin , affecting versions ≤ 3.15.1 . The flaw allows a remote attacker with no prior access to escalate privileges, rated CVSS 3.1: 9.8 (CRITICAL) — network vector, low complexity, no privileges ...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 11:37 a.m.12 views

CVE-2026-81294 WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.33 views

CVE-2026-81294 WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Authorizer = 3.15.1 versions...

9.8CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.12 views

CVE-2026-81289

CVE-2026-81289 is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin, affecting versions 5.13.1 and earlier . The vulnerability requires user interaction (victim must visit a crafted page) but needs no prior au...

7.1CVSS5.9AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.33 views

CVE-2026-81288 WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Upsell Order Bump Offer for WooCommerce = 3.1.5 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.13 views

CVE-2026-81288

CVE-2026-81288 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the Upsell Order Bump Offer for WooCommerce WordPress plugin, affecting versions 3.1.5 and below . The CVSS v3.1 score is 7.1 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L , indicating a network-based attack...

7.1CVSS5.9AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.35 views

CVE-2026-81286 WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

9.3CVSS0.00291EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 11:37 a.m.8 views

EUVD-2026-69923

Unauthenticated SQL Injection in WCFM Marketplace = 3.8.1 versions...

9.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.22 views

CVE-2026-81286

CVE-2026-81286 is an unauthenticated SQL Injection in the WCFM Marketplace WordPress plugin, affecting versions 3.8.1 and earlier . The CNA (Patchstack) assigns a CVSS 3.1 score of 9.3 (CRITICAL) with a changed scope, indicating high confidentiality impact and low availability impact with no requ...

9.3CVSS5.9AI score0.00291EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 11:37 a.m.17 views

CVE-2026-84781

CVE-2026-84781 is a Contributor-level Cross Site Scripting (XSS) vulnerability in the WordPress Gallery PhotoBlocks plugin, affecting versions ≤ 1.3.4 . The flaw was discovered by V1T via Patchstack. An attacker with at least Contributor privileges can inject malicious scripts that execute in ano...

6.5CVSS5.9AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.33 views

CVE-2026-81283 WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in WP User Frontend = 4.3.10 versions...

8.8CVSS0.00482EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 11:37 a.m.11 views

EUVD-2026-69922

Subscriber PHP Object Injection in WP User Frontend = 4.3.10 versions...

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 11:37 a.m.41 views

CVE-2026-84781 WordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Gallery PhotoBlocks = 1.3.4 versions...

6.5CVSS0.00161EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 11:35 a.m.6 views

CVE-2025-34085

📂 Simple File List – Unauthenticated RCE Exploit CVE-2025-34085 ⚠️ Exploit Code by: Mrj Haxcore A fully working Python exploit for the WordPress Simple File List plugin = 4.2.3, which is vulnerable to unauthenticated remote code execution RCE due to insecure file upload and rename logic. 💣...

5.9AI score
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 11:34 a.m.6 views

CVE-2025-0316-Exploit

CVE-2025-0316-Exploit Kit de Explotación CVE-2025-0316 🚨 Exploit de Bypass de Autenticación para el Plugin de WordPress WP Directorybox Manager 🔥 Script de explotación automatizado para CVE-2025-0316 — Bypass de autenticación mediante una acción AJAX vulnerable. ⚠️ Aviso Legal Esta herramienta est...

9.8CVSS8.2AI score0.00748EPSS
SaveExploits2
Patchstack
Patchstack
added 2026/09/02 11:30 a.m.7 views

WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by momopon1415 in WordPress Plugin RTMKit versions = 2.1.5...

7.1CVSS5.1AI score0.00146EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder