9712 matches found
CVE-2026-27535
CVE-2026-27535 affects the WordPress Solace Extra plugin up to version 1.6.0. The vulnerability is described as Broken Access Control, enabling lower-privilege attackers to access restricted functionality. The CVSS 3.1 base score is 7.1 (High), with Network attack vector, Low attack complexity, P...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332 Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
PT-2026-71546
Subscriber Arbitrary File Download in AI Hub = 1.3.10 versions...
PT-2026-71576
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
PT-2026-71528
Subscriber SQL Injection in Form Maker by 10Web = 1.15.44 versions...
PT-2026-71527
Subscriber Cross Site Scripting XSS in AcyMailing SMTP Newsletter = 10.11.1 versions...
PT-2026-71519
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
PT-2026-71515
Subscriber SQL Injection in Do Lasso = 358 versions...
PT-2026-71563
Subscriber Cross Site Scripting XSS in Profile Extra Fields by BestWebSoft = 1.3.4 versions...
PT-2026-71580
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
PT-2026-71557
Subscriber SQL Injection in If-So Dynamic Content Personalization = 1.10 versions...
PT-2026-71498
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
PT-2026-71505
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
PT-2026-71586
Subscriber Privilege Escalation in Directories Pro = 2.0.5 versions...
PT-2026-71518
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
PT-2026-71520
Subscriber SQL Injection in CubeWP = 1.1.30 versions...