44610 matches found
CVE-2026-65483
CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version
CVE-2026-65481 WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability
Contributor Local File Inclusion in Vino = 1.9 versions...
EUVD-2026-48091
Contributor Cross Site Scripting XSS in TheGem = 5.11.1 versions...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...
CVE-2026-65476
Unauthenticated Broken Access Control in Civi = 2.2.4 versions...
CVE-2026-65473
CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions
CVE-2026-65473 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Virtue/Ascend/Pinnacle Toolkit = 4.9.12 versions...
CVE-2026-65467
CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine
EUVD-2026-48076
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65463
CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...
CVE-2026-65455 WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability
Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...
CVE-2026-65449 WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
EUVD-2026-48214
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
CVE-2026-65450 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Contributor SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48215
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-61981 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-61973
CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected
CVE-2026-61973 WordPress ShopLentor Pro plugin <= 2.8.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in ShopLentor Pro = 2.8.5 versions...
CVE-2026-61954
CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (