239868 matches found
CVE-2026-78275 WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability
Editor Arbitrary File Deletion in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78275
This Arbitrary File Deletion vulnerability affects the WordPress Fluent Boards Pro plugin in versions ≤ 2.0.11 . The flaw requires an authenticated user with Editor privileges and is scored CVSS 6.8 (Medium) with a vector of AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, indicating a high availability impa...
CVE-2026-78273
CVE-2026-78273 affects the Fluent Boards Pro WordPress plugin in versions 2.0.11 and earlier . The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable by a user with subscriber-level privileges. The CVSS 3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L, in...
CVE-2026-78273 WordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78271
CVE-2026-78271 is an Editor Privilege Escalation vulnerability in the WordPress FluentCRM Pro plugin, affecting versions 3.1.12 and earlier . The flaw was discovered by Ananda Dhakal via Patchstack. It allows an authenticated user with the Editor role to escalate privileges, rated CVSS 7.2 (HIGH)...
CVE-2026-78271 WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability
Editor Privilege Escalation in FluentCRM Pro = 3.1.12 versions...
CVE-2026-78261 WordPress Realtyna Organic IDX plugin plugin <= 5.4.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
EUVD-2026-66994
Unauthenticated Cross Site Scripting XSS in Realtyna Organic IDX plugin = 5.4.1 versions...
CVE-2026-78260 WordPress Epayco plugin <= 8.4.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in Epayco = 8.4.6 versions...
CVE-2026-78261
CVE-2026-78261 is an unauthenticated Cross Site Scripting (XSS) vulnerability in the Realtyna Organic IDX WordPress plugin , affecting versions
CVE-2026-78260
An unauthenticated SQL injection vulnerability was identified in the WordPress plugin Epayco (Epayco Gateway) in versions 8.4.6 and earlier . The flaw was discovered by Lee Chul Woong and is rated CVSS 9.3 (Critical) with a changed scope, high confidentiality impact, and low availability impact. ...
CVE-2026-78257 WordPress Booking and Rental Manager plugin <= 2.7.5 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Booking and Rental Manager = 2.7.5 versions...
CVE-2026-78257
CVE-2026-78257 is a PHP Object Injection vulnerability in the WordPress plugin Booking and Rental Manager for WooCommerce (versions ≤ 2.7.5), discovered by daroo and rated CVSS 8.8 (High) by Patchstack. The flaw allows a user with Contributor privilege to exploit the injection over the network wi...
CVE-2026-32566
CVE-2026-32566 is an unauthenticated privilege escalation vulnerability in the ACPT (Pro) – Custom Post Types Plugin for WordPress , affecting versions 2.0.63 and earlier . The flaw was discovered by VDsec and rated CVSS 9.8 (Critical) by Patchstack, with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I...
CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
EUVD-2026-66991
Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32564
CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...
EUVD-2026-66990
Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...
CVE-2026-32550
CVE-2026-32550 is a SQL Injection vulnerability in the WordPress Kadence Shop Kit plugin , affecting versions ≤ 3.0.6 . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with no user interaction, as indicated by the CVSS 3.1 vector (AV:N/AC:L/PR:L/...