9812 matches found
EUVD-2026-57899
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66661
CVE-2026-66661 affects the WordPress plugin Directories Pro (versions
CVE-2026-66661 WordPress Directories Pro plugin <= 2.0.5 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66661
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
CVE-2026-66658
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66658
CVE-2026-66658 affects WordPress Reviewer plugin versions ≤ 3.14.2. The issue is described as a SQL Injection vulnerability (Subscriber SQL Injection) with CVSS 3.1, base score 8.5 (HIGH), vector: NETWORK/attackVector N, AC:L, PR:L, UI:N, S:C, C:H, I:N, A:L. Connected sources include CVE records ...
CVE-2026-66658 WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
EUVD-2026-57897
Subscriber SQL Injection in Reviewer = 3.14.2 versions...
CVE-2026-66654
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
CVE-2026-66654 WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
CVE-2026-66471
CVE-2026-66471 affects the WordPress Accordion plugin (versions
CVE-2026-66471 WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
EUVD-2026-57889
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66471
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66467
Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...
CVE-2026-66467 WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in FluentCommunity = 2.7.5 versions...
CVE-2026-66467
CVE-2026-66467 affects the WordPress FluentCommunity plugin (versions <= 2.7.5). The connected records confirm a Cross Site Scripting (XSS) vulnerability in the Subscriber context. The CVE entry lists CVSS v3.1 metrics with a base score of 6.5 (Medium) and attributes: Network attack vector, Lo...
CVE-2026-66460 WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...