475974 matches found
EUVD-2026-48088
Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...
CVE-2026-65477
CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...
EUVD-2026-48086
Unauthenticated Sensitive Data Exposure in Ninja Tables = 5.2.10 versions...
EUVD-2026-48084
Unauthenticated Broken Access Control in Kit formerly ConvertKit = 3.3.5 versions...
CVE-2026-65472
CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions
EUVD-2026-48082
Contributor Cross Site Scripting XSS in Fluent Support = 2.3.0 versions...
CVE-2026-65468
Affected product: WordPress JetBooking plugin
EUVD-2026-48078
Custom role Server Side Request Forgery SSRF in JetBooking = 4.1.2 versions...
CVE-2026-65461
The WordPress plugin Really Simple CSV Importer (vulnerable:
EUVD-2026-48074
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
CVE-2026-65456
CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions
EUVD-2026-48221
Contributor Insecure Direct Object References IDOR in Product Slider for WooCommerce = 1.13.62 versions...
CVE-2026-65454
The CVE-2026-65454 entry concerns the WordPress plugin Quiz And Survey Master (
EUVD-2026-48218
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
EUVD-2026-48217
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65453
Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store
EUVD-2026-48216
Contributor SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48213
Unauthenticated Cross Site Request Forgery CSRF in Simple Link Directory Pro = 15.0.8 versions...
CVE-2026-61981
CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...