475982 matches found
CVE-2026-57696
The CVE concerns the WordPress Picture Gallery plugin (WordPress plugin) with versions
EUVD-2026-48171
Contributor Arbitrary File Deletion in Picture Gallery = 1.6.5 versions...
CVE-2026-57427
CVE-2026-57427 documents an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting the WordPress Download Monitor — WPForms Lock plugin, version
EUVD-2026-48169
Unauthenticated Cross Site Scripting XSS in Download Monitor - WPForms Lock = 1.0.4 versions...
EUVD-2026-48170
Unauthenticated Cross Site Scripting XSS in Sprout Clients = 3.2.3 versions...
CVE-2026-57425
CVE-2026-57425 affects the WordPress plugin Autopay dla WooCommerce (versions
CVE-2026-57384
CVE-2026-57384 describes a Cross Site Scripting (XSS) vulnerability in the WordPress WishList Member X plugin, affecting versions
EUVD-2026-48166
Subscriber Cross Site Scripting XSS in WishList Member X = 3.32.0 versions...
CVE-2026-57397
Summary: CVE-2026-57397 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Coaching theme, affected versions <= 3.9.2. Affected product/component: WordPress Coaching theme (WordPress plugin/theme). Root cause / vulnerability type: Cross Site Scripting (XSS);...
EUVD-2026-48167
Unauthenticated Cross Site Scripting XSS in Coaching = 3.9.2 versions...
EUVD-2026-48165
Unauthenticated Cross Site Scripting XSS in Funnel Kit Funnel Builder PRO = 3.15.0.7 versions...
EUVD-2026-48163
Unauthenticated Cross Site Scripting XSS in Visitor Traffic Real Time Statistics Pro = 11.9.1 versions...
CVE-2026-57367
CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...
CVE-2026-27422
The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions
EUVD-2026-48160
Unauthenticated Broken Access Control in YT Player = 2.0.9 versions...
CVE-2026-27403
CVE-2026-27403 concerns the WordPress Hubbub Lite plugin, versions
CVE-2026-27399
CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...
EUVD-2026-48155
Subscriber Broken Access Control in uListing = 2.2.0 versions...