11547 matches found
CVE-2026-42660
Subscriber Sensitive Data Exposure in Contest Gallery = 28.1.7 versions...
CVE-2026-42411
Unauthenticated Broken Authentication in CloudSecure WP Security = 1.4.7 versions...
CVE-2026-42649
Unauthenticated Cross Site Scripting XSS in Favicon Rotator = 1.2.11 versions...
CVE-2026-40788
Subscriber Broken Access Control in ChatBot = 7.9.7 versions...
CVE-2026-40794
Subscriber Broken Access Control in myCred = 3.0.3 versions...
CVE-2026-40776
Unauthenticated Broken Access Control in WP Event SOlution = 4.1.8 versions...
CVE-2026-40771
Unauthenticated SQL Injection in Contest Gallery = 28.1.6 versions...
CVE-2026-40741
Unauthenticated Broken Access Control in Redsys for WooCommerce Light = 7.0.0 versions...
CVE-2026-39579
Contributor Privilege Escalation in B Blocks = 2.0.31 versions...
CVE-2026-39513
Unauthenticated Broken Access Control in Easy Appointments = 3.12.21 versions...
CVE-2026-39480
Unauthenticated Sensitive Data Exposure in Backup Migration = 2.1.1 versions...
CVE-2026-39447
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.10.6 versions...
CVE-2026-27407
Editor Privilege Escalation in AI Engine = 3.4.9 versions...
CVE-2026-34892
Subscriber Broken Access Control in Rank Math SEO = 1.0.271 versions...
CVE-2026-27333
Unauthenticated Deserialization of untrusted data in Paid Videochat Turnkey Site = 7.3.23 versions...
CVE-2025-60175
Administrator Server Side Request Forgery SSRF in PopAd = 1.0.4 versions...
CVE-2026-52699 WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in VikRentCar = 1.4.5 versions...
CVE-2026-52697
CVE-2026-52697 affects the WordPress Taskbuilder plugin (versions <= 5.0.7). The vulnerability is an SQL Injection in the Taskbuilder component, with CVSSv3.1 metrics indicating a high-severity issue (8.5) that is network-exploitable, requires low privileges, and does not require user interact...
