38297 matches found
CVE-2026-65467
CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine
EUVD-2026-48076
Unauthenticated Cross Site Request Forgery CSRF in GiveWP = 4.16.3 versions...
CVE-2026-65463
CVE-2026-65463 affects the WordPress Masteriyo LMS plugin, versioned up to 2.3.1, with an Insecure Direct Object References (IDOR) vulnerability in Subscriber scope. The entry provides a CVSS 3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, and requires low privil...
EUVD-2026-48214
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
EUVD-2026-48215
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-61973
CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected
CVE-2026-61954
CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (
EUVD-2026-48209
Unauthenticated Privilege Escalation in TrueBooker = 1.2.3 versions...
CVE-2026-61950
CVE-2026-61950 : Unauthenticated SQL injection in the WordPress plugin TrueBooker (versions <= 1.2.3). The CVE entry indicates a high-severity, network-exposed vulnerability with low attack complexity and no privileges required. The impact is highlighted as high confidentiality impact and low ...
EUVD-2026-48207
Unauthenticated SQL Injection in Bookly = 27.7 versions...
EUVD-2026-48206
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
EUVD-2026-48200
Unauthenticated Broken Authentication in Ziina = 1.2.21 versions...
CVE-2026-59542
The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin
EUVD-2026-48181
Unauthenticated Cross Site Request Forgery CSRF in Ninja Forms File Uploads Extension = 3.3.26 versions...
EUVD-2026-48168
Unauthenticated Broken Access Control in Autopay dla WooCommerce = 2.2.27 versions...
EUVD-2026-48164
Customer Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.4 versions...
EUVD-2026-48159
Unauthenticated Broken Access Control in WP Fast Total Search = 1.81.282 versions...
CVE-2026-27403
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affects Hubbub Lite: from n/a through 1.36.3...