148663 matches found
EUVD-2026-70578
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar = 1.2.20 versions...
CVE-2026-84766
An unauthenticated bypass vulnerability exists in the FluentBooking Pro WordPress plugin in versions 2.2.1 and below , as reported by Patchstack. The CVSS 3.1 score is 5.9 (Medium) , with a network attack vector, high complexity, no privileges required, and a high integrity impact but no confiden...
EUVD-2026-70561
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
EUVD-2026-70579
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84767 WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
CVE-2026-84767
An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...
CVE-2026-84766 WordPress FluentBooking Pro plugin <= 2.2.1 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in FluentBooking Pro = 2.2.1 versions...
CVE-2026-84765
Breadcrumb NavXT , a popular WordPress plugin, is affected by an unauthenticated Cross-Site Scripting (XSS) vulnerability in versions 7.5.1 and earlier . The flaw is classified with a CVSS 3.1 score of 7.1 (HIGH) , reflecting a network attack vector, low complexity, no privileges required, but re...
CVE-2026-84765 WordPress Breadcrumb NavXT plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
EUVD-2026-70580
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
CVE-2026-84763
CVE-2026-84763 affects the RTMKit (Rome Theme for Elementor) WordPress plugin, versions 2.1.5 and earlier . The vulnerability is an unauthenticated Cross-Site Scripting (XSS) flaw, scored CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. The changed scope indicates the im...
EUVD-2026-70582
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84763 WordPress RTMKit plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
EUVD-2026-70581
Unauthenticated Cross Site Scripting XSS in RTMKit = 2.1.5 versions...
CVE-2026-84762
CVE-2026-84762 affects the WP EasyPay WordPress plugin in versions 4.5.3 and earlier . The vulnerability is an unauthenticated bypass that allows a remote attacker with no privileges and no user interaction to achieve low integrity impact , scoring CVSS 5.3 (Medium) . The specific component or ro...
CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability
Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...
CVE-2026-84761 WordPress LiteSpeed Cache plugin <= 7.9 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
EUVD-2026-70583
Unauthenticated Server Side Request Forgery SSRF in LiteSpeed Cache = 7.9 versions...
CVE-2026-84761
CVE-2026-84761 affects the WordPress LiteSpeed Cache plugin in versions 7.9 and earlier , where an unauthenticated Server Side Request Forgery (SSRF) flaw is present. The CVSS v3.1 score is 7.2 (HIGH) with a Changed scope and low impacts to both confidentiality and integrity, while availability i...