CVE-2026-39774 WordPress Tourfic Pro plugin <= 1.17.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tourfic Pro = 1.17.3 versions...

CVE-2026-39774

The Tourfic Pro WordPress plugin, version 1.17.3 and below , is vulnerable to an unauthenticated privilege escalation (CWE-266). This flaw allows an attacker to gain elevated permissions, potentially leading to high impact on confidentiality, integrity, and availability . No specific root cause, ...

CVE-2026-32575

The SUMO Affiliates Pro plugin for WordPress, version

CVE-2026-32575 WordPress SUMO Affiliates Pro plugin <= 11.7.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

EUVD-2026-93237

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

EUVD-2026-93235

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32572

The WP User Frontend Pro plugin for WordPress (versions

CVE-2026-32572 WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP User Frontend Pro = 4.2.13 versions...

CVE-2026-32568

The WooCommerce Designer Pro plugin for WordPress (versions

CVE-2026-32568 WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...

EUVD-2026-93231

Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...

cve-2026-43499

IonStack Эксплойт ядра для Redmi Pad Pro dizi / POCO Pad 5G. Cloudflare Pages Deployment Git Integration 1. Перейдите в Cloudflare Dashboard Workers & Pages Create Pages Connect to Git 2. Выберите этот репозиторий 3. Настройки сборки: Framework preset: None Build command: оставьте пустым Build...

CVE-2026-86786

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as wel...

CVE-2026-39789

Unauthenticated Broken Access Control in Fluent Affiliate Pro = 1.6.4 versions...

CVE-2026-32576

Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Faktur Pro for WooCommerce: from n/a through 3.2.2...

CVE-2026-105072

Unauthenticated Broken Access Control in FluentBooking Pro 2.5.0 versions...

CVE-2026-86786 Slider Pro <= 1.0.0 - Unauthenticated Sensitive Data Disclosure via sliderpro_multiple_images

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as wel...

EUVD-2026-92969

The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the title, excerpt and permalink of non-public posts, including drafts, pending, scheduled, private and trashed posts, as wel...

CVE-2026-86786

The Slider Pro WordPress plugin (versions through 1.0.0 ) is vulnerable to an Unauthenticated Sensitive Data Disclosure due to a lack of capability or authorization checks on one of its AJAX actions. An unauthenticated attacker can exploit this to retrieve the title, excerpt, and permalink of non...

WordPress Slider Pro plugin <= 1.0.0 - Unauthenticated Sensitive Data Disclosure vulnerability

Unauthenticated Sensitive Data Disclosure vulnerability discovered by Seongwon Lee in WordPress Plugin Slider Pro versions = 1.0.0...