39497 matches found
CVE-2026-65537
Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names = 1.3.3 versions...
EUVD-2026-48137
Unauthenticated Cross Site Request Forgery CSRF in افزونه حمل و نقل ووکامرس پست پیشتاز و سفارشی، پیک موتوری = 4.4.5 versions...
EUVD-2026-48132
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
CVE-2026-65525
Unauthenticated Broken Access Control in Civi Framework = 2.2.0 versions...
CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65524
Technical details for CVE-2026-65524 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-65521 WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...
CVE-2026-65518
The CVE concerns the WordPress plugin “Accept Donations with PayPal & Stripe” (v <= 1.5.5) and reports a Cross Site Scripting (XSS) vulnerability. Affected product is the WordPress plugin; vulnerability arises from an XSS issue in versions up to 1.5.5 as described in the CVE records. Public re...
CVE-2026-65514
CVE-2026-65514 affects the WordPress plugin Appointment Hour Booking up to version 1.5.86, with a reported Cross Site Scripting (XSS) vulnerability. The CVSS 3.1 base score is 6.5 (Medium); attack vector is network, attack complexity low, privileges required low, and user interaction is required,...
CVE-2026-65512 WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...
CVE-2026-65503
The CVE concerns WordPress plugin Ultimate Store Kit Elementor Addons versions
CVE-2026-65498 WordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Complianz = 7.5.0 versions...
EUVD-2026-48108
Administrator PHP Object Injection in Complianz = 7.5.0 versions...
CVE-2026-65493
The CVE-2026-65493 entry concerns the WordPress Dokan Pro plugin (
EUVD-2026-48099
Unauthenticated Cross Site Request Forgery CSRF in LA-Studio Element Kit for Elementor = 1.6.2 versions...
CVE-2026-65483
CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version
EUVD-2026-48091
Contributor Cross Site Scripting XSS in TheGem = 5.11.1 versions...
CVE-2026-65478
Subscriber Broken Access Control in ListingPro = 2.9.10 versions...