CVE-2023-2916

CVE-2023-2916 CVE-2023-2916 PoC WordPress用InfiniteWP Clientプラグイン（バージョン1.11.1以前）には、機密情報漏洩の脆弱性が存在します。この脆弱性により、購読者レベルの権限以上を持つ認証済み攻撃者が、設定詳細を含む機密データを抽出できる可能性があります。この脆弱性の悪用は、プラグインが事前に設定されていない場合にのみ可能です。別の任意のプラグインインストールおよび有効化の脆弱性と組み合わせると、サイトのリモート管理や権限昇格につながる可能性があります。...

CVE-2025-9049

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokriaccountmemberpermissions' function in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with...

CVE-2026-15550 Ninja Forms - Save Progress <= 3.0.30 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Data Deletion via admin-ajax.php with admin_init Hook

The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. This is due to the lack of capability checks and nonce verification in the 'bulkactions' function. This makes it possible for authenticated attackers, with...

CVE-2024-12594

CVE-2024-12594 ALL In One Custom Login Page history.pushState'', '', '/'; document.forms0.submit; root@kitploit: "success":true,"data":"tempurl":"https://wp-dev.ddev.site?tempaccess=Osn6apJoSJunYNqOhDsn&userid=1","message":"Tempo...

CVE-2024-12558

CVE-2024-12558 WP BASE Booking of Appointments, Services and Events history.pushState'', '', '/'; document.forms0.submit;...

CVE-2024-54379

CVE-2024-54379 Minterpress = 1.0.5 - 缺少授权导致已认证（订阅者+）任意选项更新 描述 WordPress 的 Minterpress 插件存在未授权的数据修改漏洞，可能因缺少对某个功能的权限检查而导致权限提升，影响版本包括所有 1.0.5 及以下的版本。这使得经过身份验证的攻击者（拥有订阅者及以上级别的访问权限）能够更新 WordPress 站点上的任意选项。此漏洞可被利用来将注册的默认角色更新为管理员，并启用用户注册，从而使攻击者获得对易受影响站点的管理员用户访问权限。 详细信息 类型 ：插件 插件标识 ：minterpress 受影响版本...

CVE-2023-6985

CVE-2023-6985 10Web AI Assistant – Asistente de escritura de contenido con IA = 1.0.18 - Autorización faltante para instalación/activación arbitraria de plugins por parte de usuarios autenticados Suscriptor+ Descripción Descripción El plugin 10Web AI Assistant – Asistente de escritura de contenid...

CVE-2023-47840

CVE-2023-47840 Qode Essential Addons = 1.5.2 - 缺少授权，导致已认证（订阅者及以上）用户可任意安装/激活插件 描述: Qode Essential Addons 是一个 WordPress 插件，由于在 installplugin 函数中缺少权限检查（影响所有版本，包括 1.5.2），该插件容易遭受未授权数据修改。这使得经过身份验证的攻击者（具有订阅者及以上访问权限）能够安装并激活任意插件。 root@kitploit: Severity: medium CVE ID: CVE-2023-47840 CVSS Score: 4.3 CVSS...

CVE-2026-81758

CVE-2026-81758 is a Broken Access Control vulnerability in the WordPress plugin OwnerRez API , affecting versions ≤ 1.2.6 . The flaw allows users with the Subscriber role to perform actions they should not be authorized for, as discovered by JunHee CHO via PatchStack. The CNA-assigned CVSS 3.1 sc...

CVE-2026-81761

WpEvently is a WordPress plugin affected by a Broken Access Control vulnerability in versions ≤ 5.5.0 . The flaw allows a Subscriber -level user to perform actions beyond their intended permissions, resulting in a low confidentiality impact with no integrity or availability loss. The CVSS 3.1 sco...

EUVD-2026-67648

The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ai1wmbackupspath' parameter in all versions up to, and including, 2.84. This is due to insufficient input sanitization and output escaping on user-supplied attributes combine...

PT-2026-81967

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.3 does not sanitize a user-supplied image reference before using it as the source of a file move, allowing users with a subscriber-level account to relocate arbitrary server-readable image files...

WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.8.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin FundEngine versions = 1.8.1...

CVE-2026-78467

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2026-78470 WP Project Manager Pro <= 4.0.1 - Authenticated (Subscriber+) SQL Injection

The WP Project Manager Pro plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 4.0.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers,...

CVE-2026-78266

AutomatorWP , a WordPress plugin , is affected by a Broken Access Control vulnerability in versions ≤ 5.8.3 . The flaw allows a Subscriber -level authenticated user to perform actions beyond their expected permissions, resulting in a high integrity impact (CVSS 3.1 base score 6.5 / MEDIUM ). The ...

CVE-2026-66668

Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...

CVE-2026-10734

The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7record Log Endpoint in all versions up to, and including, 2.15.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2026-10734

The CVE-2026-10734 entry describes a Stored Cross-Site Scripting (XSS) vulnerability in the Infility Global WordPress plugin. Affected software: Infility Global plugin for WordPress (versions up to and including 2.15.21). Root cause: insufficient input sanitization and output escaping on the /cf7...

CVE-2026-15345

The ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.11.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...