1000784 matches found
CVE-2026-86444
LearnPress is a WordPress plugin vulnerable to reflected XSS before version 4.4.7. The root cause is an unescaped user-supplied value (the 'skin' parameter ) used in an HTML attribute on a public page. An unauthenticated attacker can craft a link that, when opened, executes arbitrary JavaScript i...
CVE-2026-85572
The Tutor LMS WordPress plugin (versions 4.0.0 through
EUVD-2026-80200
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...
EUVD-2026-80199
The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when deciding whether to strip HTML from stored entry values, allowing unauthenticated visitors to have markup rendered in th...
EUVD-2026-80195
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...
CVE-2026-85530
The GiveWP WordPress plugin prior to version 4.16.8.1 contains an unauthenticated account takeover vulnerability caused by inconsistent normalisation of a donor's e-mail address between the stored value and the value used for donor lookups. An unauthenticated attacker can exploit this sanitizatio...
CVE-2026-85530 GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch
The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user...
CVE-2026-85641 Formidable Forms 6.34 - Unauthenticated Stored Content Injection via 'updated_by' Parameter
The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when deciding whether to strip HTML from stored entry values, allowing unauthenticated visitors to have markup rendered in th...
CVE-2026-85641
Formidable Forms WordPress plugin (versions before 6.35 ) contains an unauthenticated stored content injection vulnerability. The root cause is that the plugin does not restrict who can set the updated_by parameter, which records the user who last edited a form entry. Because the plugin relies on...
CVE-2026-85572 Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure
The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...
CVE-2026-85349 FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR
The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...
CVE-2026-86444 LearnPress < 4.4.7 - Reflected XSS via 'skin' Parameter
The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...
CVE-2026-85349
The FluentBoards WordPress plugin before 2.0.15 contains an Insecure Direct Object Reference (IDOR) flaw in its authorization logic. When returning the list of boards a user belongs to, the plugin fails to properly verify authorization, allowing any authenticated user at Subscriber level or above...
EUVD-2026-80198
The Tutor LMS WordPress plugin before 4.0.8 does not check that a user has access to a course before returning its lesson discussion content, allowing any authenticated user, such as a subscriber, to read comments from courses they are not enrolled in, including comments awaiting moderation...
EUVD-2026-80196
The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a donor's e-mail address between the value it stores and the value it later uses to look that donor up, allowing unauthenticated users to be resolved as an arbitrary donor and to set the WordPress password of any user...
CVE-2026-84829
The Optimole WordPress plugin versions prior to 4.2.12 contain a Stored Cross-Site Scripting vulnerability. The root cause is the failure to properly escape a user-supplied value in the srcset descriptor parameter before it is used to build an image tag attribute. Because the injection requires n...
CVE-2026-84905 Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation
The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users with contributor-level access and above to create new WordPress user accounts that carry capabilities beyond their own, including publishing content and uploadin...
CVE-2026-84829 Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter
The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting...
EUVD-2026-80192
The Eventin WordPress plugin before 4.1.24 does not verify a user's capability to create accounts when adding a speaker, allowing users with contributor-level access and above to create new WordPress user accounts that carry capabilities beyond their own, including publishing content and uploadin...
EUVD-2026-80191
The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting...