9812 matches found
CVE-2026-28159
CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...
CVE-2026-28157
CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions
CVE-2026-28157
Subscriber Path Traversal in Do Lasso = 358 versions...
EUVD-2026-57950
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
Subscriber SQL Injection in Do Lasso = 358 versions...
EUVD-2026-57949
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28156
CVE-2026-28156 pertains to the WordPress Do Lasso plugin
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-27999
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
EUVD-2026-57940
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
CVE-2026-27999
The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...
CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
EUVD-2026-57933
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
CVE-2026-27535 WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Solace Extra = 1.6.0 versions...
CVE-2026-27535
CVE-2026-27535 affects the WordPress Solace Extra plugin up to version 1.6.0. The vulnerability is described as Broken Access Control, enabling lower-privilege attackers to access restricted functionality. The CVSS 3.1 base score is 7.1 (High), with Network attack vector, Low attack complexity, P...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
CVE-2026-14332 Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' Action
The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disconnect the store and take the storefront offline until an...
