CVE-2023-46197

CVE-2023-46197 Popup by Supsystic = 1.10.19 - Missing Authorization to Sensitive Information Exposure Description "The Popup by Supsystic plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.10.19 via the getWpCsvList action. This makes it...

CVE-2023-36531

CVE-2023-36531 LiquidPoll – Advanced Polls for Creators and Brands = 3.3.68 - Missing Authorization via activateaddon Info Needs a subscriber level user and the plugin needs to be disabled. This will activate the plugin you provide. Usage usage: CVE-2023-36531.py -h -w URL -u USERNAME -p PASSWORD...

CVE-2024-10728

CVE-2024-10728 PostX var ultpoptionpanel =...

CVE-2023-45657

CVE-2023-45657 Nexter = 2.0.3 - Authenticated Subscriber+ SQL Injection via 'to' and 'from' Description: The Nexter theme for WordPress is vulnerable to SQL Injection via the 'to' and 'from' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied...

CVE-2026-97353

The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX actions, allowing users with subscriber-level access and above to write arbitrary post meta, under attacker-chosen keys, ...

CVE-2026-97352

The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from t...

CVE-2026-113489

The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, moderation status and featured flag of images belonging to other users' listings, a...

CVE-2026-113491

The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server, limit...

CVE-2026-97352

The News Kit Addons For Elementor WordPress plugin (versions prior to 1.4.9 ) is vulnerable to an authorization bypass. The software fails to perform a capability check on one of its AJAX actions, specifically involving nekit_install_importer. This flaw allows authenticated users with subscriber-...

CVE-2026-97353

The News Kit Addons For Elementor WordPress plugin, affecting versions through 1.4.7 , is vulnerable to an authorization bypass. An authenticated user with subscriber-level access or higher can exploit a missing capability or ownership check in an AJAX action (nekit_update_mega_menu_form ) to wri...

CVE-2026-113489 GeoDirectory < 2.8.194 - Subscriber+ Arbitrary Listing Image Modification via IDOR

The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, moderation status and featured flag of images belonging to other users' listings, a...

CVE-2026-97352 News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer

The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from t...

CVE-2026-97353 News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form

The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX actions, allowing users with subscriber-level access and above to write arbitrary post meta, under attacker-chosen keys, ...

EUVD-2026-109223

The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, moderation status and featured flag of images belonging to other users' listings, a...

EUVD-2026-109227

The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX actions, allowing users with subscriber-level access and above to write arbitrary post meta, under attacker-chosen keys, ...

WordPress News Kit Addons For Elementor plugin < 1.4.9 - Subscriber+ Plugin Installation and Activation vulnerability

Subscriber+ Plugin Installation and Activation vulnerability discovered by Usama Arshad in WordPress Plugin News Kit Elementor Addons versions 1.4.9...

WordPress News Kit Addons For Elementor plugin <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update vulnerability

Subscriber+ Arbitrary Post Meta Update vulnerability discovered by Usama Arshad in WordPress Plugin News Kit Elementor Addons versions = 1.4.7...

CVE-2026-107907

The MAS Videos WordPress plugin (versions through 1.3.4 ) is vulnerable to unauthorized content deletion. The root cause is a missing capability or ownership check when handling front-end video and playlist deletion requests. Additionally, the nonce verification is tied to a static action rather ...

CVE-2026-107907 MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist

The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a...

WordPress Advanced Twenty Seventeen plugin <= 1.3.1 - Subscriber+ Site Theme Switch vulnerability

Subscriber+ Site Theme Switch vulnerability discovered by Seongwon LEE in WordPress Plugin Advanced Twenty Seventeen versions = 1.3.1...