261 matches found
CVE-2026-10795-Lab
CVE Lab: CVE-2026-10795 - UpdraftPlus UpdraftCentral RPC Authentication Bypass Chained to Plugin Installation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-10795, an unauthenticated authentication bypass vulnerability affecting the UpdraftPl...
CVE-2026-85038
CVE-2026-85038 affects the B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin for WordPress in versions before 5.2.40 . The root cause is a missing server-side verification of the role selected during self-registration: the plugin does not confirm that the submitted role is one actually offe...
CVE-2026-84428
fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in a route's header schema before compiling it, but the transformation is incomplete: it lowercases the properties keys and the root-level required array, and does not lowercase the...
CVE-2026-84849
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
CVE-2026-84767
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84762
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84766
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
CVE-2026-84767
An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...
CVE-2026-84767 WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
EUVD-2026-70582
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
EUVD-2026-70597
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
CVE-2026-84849
CVE-2026-84849 affects the Pre-Orders for WooCommerce WordPress plugin in versions 2.3 and earlier . The vulnerability is an unauthenticated bypass , meaning no prior login is required to exploit it. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicati...
CVE-2025-15490
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs...
CVE-2025-15490
Passster WordPress plugin versions before 4.2.26 contain a flaw in its global protection checks , enabling unauthenticated users to bypass the plugin's protection mechanism via crafted URLs. The impact is rated Medium (CVSS 5.3) with a low confidentiality impact and no integrity or availability i...
EUVD-2025-210832
The Passster WordPress plugin before 4.2.26 has a flaw in its global protection checks, allowing unauthenticated users to bypass the protection offered via crafted URLs...
CVE-2026-82228
Unauthenticated Bypass Vulnerability in SiteGround Security = 1.6.6 versions...
CVE-2026-82228
SiteGround Security WordPress plugin versions ≤ 1.6.6 are affected by an unauthenticated 2FA Bypass vulnerability, discovered by Ananda Dhakal via Patchstack. The flaw allows a network-based attacker (with high attack complexity, no prior privileges or user interaction) to bypass two-factor authe...