50807 matches found
CVE-2026-66665
Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...
CVE-2026-66685
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-65560
Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65517
Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...
CVE-2026-65520
Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...
CVE-2026-61964
Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...
CVE-2026-28183
Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0...
CVE-2026-32548
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
CVE-2026-28141
Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...
EUVD-2026-53912
Shop manager Remote Code Execution RCE in CTX Feed = 6.6.42 versions...
EUVD-2026-53909
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66706
Author Cross Site Scripting XSS in Subscribe to Comments = 2.3.1 versions...
CVE-2026-66706
CVE-2026-66706 affects the WordPress plugin “Subscribe to Comments” (versions
CVE-2026-66705
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Facebook for WordPress = 5.2.1 versions...
EUVD-2026-53902
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
EUVD-2026-53900
Customer Insecure Direct Object References IDOR in Colissimo Officiel : Méthodes de livraison pour WooCommerce = 2.10.0 versions...