EUVD-2026-63823

The Duplicate Post WordPress plugin before 1.5.6 does not check the user's capabilities before returning post data, allowing users with a delegated role to read the content, metadata and passwords of posts they are not allowed to access, including other users' private and draft content...

CVE-2026-19613

The ECS (Ele Custom Skin) for Elementor WordPress plugin versions before 4.3.10 is vulnerable to unauthorized data disclosure. The root cause is a failure to perform ownership or post-status checks when a dynamic repeater data source reads custom field values using a user-supplied post identifier...

CVE-2026-17515

The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin, in versions prior to 7.0.4 , is susceptible to sensitive information disclosure. Due to a lack of authorization and CSRF checks in an AJAX action (specifically related to mlsimport_logger_per_item), an authenticated...

CVE-2026-30889 Discourse has Unauthorized Post Data Exposure in discourse-user-notes

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, a moderator could exploit insufficient authorization checks to access metadata of posts they should not have permission to view. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain...

CVE-2026-2268

The Ninja Forms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.14.0. This is due to the unsafe application of the ninjaformsmergetags filter to user-supplied input within repeater fields, which allows the resolution of postmeta:KEY mer...

EUVD-2023-59098

Malicious code in bioql PyPI...

EUVD-2023-59236

Malicious code in bioql PyPI...

CVE-2023-6897

The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.9.2 via the the 'algwceanproductmeta' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...