490233 matches found
CVE-2026-61959
The CVE-2026-61959 entry concerns a Cross Site Scripting (XSS) vulnerability in the WordPress Business Directory plugin, affecting versions
CVE-2026-61959 WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in Business Directory = 6.4.24 versions...
CVE-2026-32548 WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
EUVD-2026-53955
Unauthenticated Broken Access Control in SureCart = 4.6.2 versions...
CVE-2026-28183
The PublishPress Capabilities (capability-manager-enhanced) plugin for WordPress is affected by an Incorrect Privilege Assignment vulnerability. This issue allows for Privilege Escalation and impacts versions from n/a through 2.45.0 . No specific root cause or remediation details are provided in ...
EUVD-2026-53953
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-28179
CVE-2026-28179 affects the WordPress FiboSearch plugin (versions
CVE-2026-28179 WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
CVE-2026-28178 WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Powerkit = 3.1.0 versions...
EUVD-2026-53951
Shop manager Cross Site Scripting XSS in FiboSearch = 1.33.0 versions...
EUVD-2026-53949
Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...
CVE-2026-28177 WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Popup Maker = 1.23.0 versions...
CVE-2026-28169
CVE-2026-28169 concerns unauthenticated sensitive data exposure in the WordPress plugin YITH WooCommerce Zoom Magnifier (versions
CVE-2026-28146 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability
Contributor Arbitrary File Download in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.14 versions...
CVE-2026-28146 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability
Contributor Arbitrary File Download in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.14 versions...
CVE-2026-28141 WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in NextGEN Gallery = 4.2.3 versions...
EUVD-2026-53945
Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...
CVE-2026-28143 WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Forminator = 1.56.0 versions...