CVE-2026-2696

The Export All URLs WordPress plugin, in versions prior to 5.1 , is vulnerable to unauthenticated sensitive data exposure . The flaw exists because the plugin generates CSV filenames containing post URLs (including private posts) using a predictable pattern based on a random 6-digit number. These...

WordPress WP-Database-Optimizer-Tools Plugin <= 0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Skalucy in WordPress Plugin WP-Database-Optimizer-Tools versions = 0.2...