254344 matches found
WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Stripe Payments versions = 2.1.2...
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by ChuongVN in WordPress Plugin TranslatePress versions = 3.3.2...
WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Udin Chan in WordPress Plugin Event Tickets versions = 5.29.2.1...
WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Udin Chan in WordPress Plugin The Events Calendar versions = 6.17.2...
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
WordPress ACPT Pro - Custom Post Types Plugin for WordPress plugin = 2.0.63 - PHP Object Injection vulnerability discovered by VDsec in WordPress Plugin ACPT Pro - Custom Post Types Plugin for WordPress versions = 2.0.63...
CVE-2026-78269
Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...
CVE-2026-66599
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-66587
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66585
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
CVE-2026-32476
Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...
CVE-2026-32477
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
CVE-2026-28171
Unauthenticated Arbitrary File Deletion in WooCommerce File Approval = 10.7 versions...
CVE-2026-28162
Unauthenticated Cross Site Scripting XSS in Events Made Easy = 3.2.5 versions...
WordPress AllCoach plugin < 1.0.2 - Unauthenticated Account Takeover vulnerability
Unauthenticated Account Takeover vulnerability discovered by Pedro Pinho in WordPress Plugin AllCoach versions 1.0.2...
WordPress YMC Smart Filter plugin < 3.11.3 - Unauthenticated Private/Draft Post Disclosure vulnerability
Unauthenticated Private/Draft Post Disclosure vulnerability discovered by Ahmed Hashim Ismael in WordPress Plugin Filter & Grids versions 3.11.3...
WordPress BookingPress plugin < 1.5.6 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by Sanjar Tulkinov in WordPress Plugin BookingPress versions 1.5.6...
CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
CVE-2026-66585 WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
