148592 matches found
CVE-2026-84776 WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
CVE-2026-84776
CVE-2026-84776 affects the MalCare Security WordPress plugin in versions ≤ 6.69 , where an unauthenticated Denial of Service (DoS) attack is possible. The vulnerability requires no user interaction and has low attack complexity , with a network-based attack vector. Per the CVSS 3.1 score of 7.5 (...
CVE-2026-84774
WP Statistics (WordPress plugin) versions
CVE-2026-84774 WordPress WP Statistics plugin <= 14.16.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
EUVD-2026-70575
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...
CVE-2026-84773 WordPress EWWW Image Optimizer plugin <= 8.7.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
EUVD-2026-70577
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...
CVE-2026-84773
EWWW Image Optimizer for WordPress (versions
EUVD-2026-70576
Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...
CVE-2026-84769
CVE-2026-84769 affects the WordPress Business Directory plugin in versions
CVE-2026-84768
CVE-2026-84768 affects the WordPress VikAppointments Services Booking Calendar plugin in versions 1.2.20 and earlier . The vulnerability is an unauthenticated SQL Injection , meaning an attacker can exploit it without prior access or credentials. The CVSS 3.1 base score is 9.3 (CRITICAL) , with a...
CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
EUVD-2026-70578
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
EUVD-2026-70561
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
EUVD-2026-70579
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...