CVE-2026-60606

...

CVE-2026-2696

The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS including private posts in a predictable pattern using a random 6-digit number. These files are stored in the publicly accessible wp-content/uploads/ directory. As a result, any unauthenticated user can...

CVE-2026-2696

The Export All URLs WordPress plugin, in versions prior to 5.1 , is vulnerable to unauthenticated sensitive data exposure . The flaw exists because the plugin generates CSV filenames containing post URLs (including private posts) using a predictable pattern based on a random 6-digit number. These...

EUVD-2026-0996

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Team Showcase team-showcase allows Stored XSS.This issue affects Team Showcase: from n/a through = 2.9...