9892 matches found
CVE-2025-69332 WordPress Bookify plugin <= 1.1.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Bookify = 1.1.1 versions...
CVE-2026-48969
Subscriber Broken Access Control in Really Simple SSL = 9.5.9 versions...
CVE-2016-20070
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
CVE-2026-48969
CVE-2026-48969 describes a Broken Access Control vulnerability in the WordPress plugin Really Simple SSL prior to or equal to version 9.5.9 . The initial description and connected records confirm the affected product and version range; the CVSS metrics indicate a Network attack vector with Low pr...
CVE-2016-20070 WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
CVE-2016-20070
CVE-2016-20070 affects WordPress plug‑in Booking Calendar Contact Form 1.0.23 . The vulnerability comprises a privilege escalation and a stored XSS flaw that allows authenticated, subscriber‑level users to modify plugin options and inject XSS payloads. Payloads can be supplied via parameters such...
CVE-2016-20070 WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS
WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize input parameters. Attackers with...
PT-2026-49433
Subscriber Sensitive Data Exposure in WPPizza = 3.19.9 versions...
PT-2026-49432
Subscriber Broken Access Control in Amelia = 2.2 versions...
VulnCheck KEV: CVE-2026-48969
Subscriber Broken Access Control in Really Simple SSL = 9.5.9 versions...
PT-2026-49411
Subscriber SQL Injection in MasterStudy LMS = 3.7.25 versions...
PT-2026-49521
Subscriber SQL Injection in Taskbuilder = 5.0.7 versions...
PT-2026-49394
Subscriber Insecure Direct Object References IDOR in EventPrime = 4.3.0.0 versions...
PT-2026-49487
Subscriber SQL Injection in WP Time Slots Booking Form = 1.2.50 versions...
PT-2026-49492
Name of the Vulnerable Software and Affected Versions Amelia versions prior to 2.4 Description A privilege escalation issue exists where users with Subscriber roles can gain higher privileges. Recommendations Update to a version later than 2.3...
PT-2026-49431
Subscriber Broken Access Control in myCred = 3.0.3 versions...
PT-2026-49373
Subscriber Broken Authentication in FunnelKit Automations = 3.7.3 versions...
PT-2026-49482
Subscriber SQL Injection in GamiPress = 7.8.7 versions...