20667 matches found
EUVD-2026-64806
Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...
EUVD-2026-64805
Unauthenticated Sensitive Data Exposure in WP Cafe Pro 3.0.15 versions...
EUVD-2026-64804
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...
CVE-2026-32558 WordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...
CVE-2026-32558
Affiliate Pro – Affiliate Program for WooCommerce & WordPress , a WordPress plugin, is affected by an unauthenticated privilege escalation vulnerability in versions 8.9.1 and below . An attacker over the network can escalate privileges without prior authentication or user interaction, resulting i...
CVE-2026-32477 WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
EUVD-2026-64801
Unauthenticated Arbitrary File Deletion in ShopBuilder Pro – Elementor WooCommerce Builder Addons = 2.2.0 versions...
CVE-2026-32478
CVE-2026-32478 is a Subscriber-level SQL Injection vulnerability in the WP Project Manager Pro WordPress plugin (versions ≤ 4.0.1 ), discovered by researcher dutafi . The flaw allows a user with the low-privilege Subscriber role to execute arbitrary SQL queries, resulting in high confidentiality ...
CVE-2026-32477
CVE-2026-32477 is an unauthenticated arbitrary file deletion vulnerability in the WordPress plugin ShopBuilder Pro – Elementor WooCommerce Builder Addons in versions 2.2.0 and earlier . An attacker can delete arbitrary files over the network without authentication or user interaction, leading to ...
CVE-2026-78279 WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
EUVD-2026-64786
Unauthenticated Cross Site Request Forgery CSRF in Fluent Support Pro = 2.3.1 versions...
CVE-2026-78279
CVE-2026-78279 is an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Fluent Support Pro , affecting versions ≤ 2.3.1 . The vulnerability was discovered by Ananda Dhakal (Patchstack). A CVSS 3.1 score of 5.4 (Medium) is assigned, with a network vector, low a...
EUVD-2026-64784
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
EUVD-2026-64785
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...
CVE-2026-78277
FluentCRM Pro , a WordPress plugin, is affected by a Server-Side Request Forgery (SSRF) vulnerability in its Subscriber functionality, impacting versions ≤ 3.1.12 . The vulnerability was discovered by Ananda Dhakal via Patchstack. The CVSS 3.1 score is 4.9 (Medium) , with a network attack vector,...
CVE-2026-78278
Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...
CVE-2026-78277 WordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability
Subscriber Server Side Request Forgery SSRF in FluentCRM Pro = 3.1.12 versions...
CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...