476220 matches found
CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-65547
CVE-2026-65547 is a SQL injection vulnerability in the WordPress Creative Mail plugin, affecting versions ≤ 1.6.9. The issue targets subscriber handling and is documented across multiple sources (NVD/CVELIST, patchstack, EUVD). No exploitation status or in-the-wild details are provided in the con...
EUVD-2026-53977
Subscriber SQL Injection in Creative Mail = 1.6.9 versions...
EUVD-2026-53975
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
CVE-2026-65546
CVE-2026-65546 affects the WordPress plugin Qode Tours (versions
CVE-2026-65545 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65543 WordPress Vimeo plugin <= 1.2.2 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Vimeo = 1.2.2 versions...
EUVD-2026-53971
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
Unauthenticated Broken Access Control in Staff Training = 1.0.7 versions...
CVE-2026-65541
The CVE concerns WordPress Plugin “Staff Training” versions
EUVD-2026-53969
Unauthenticated SQL Injection in WP OAuth Server = 6.2.0 versions...
EUVD-2026-53970
Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...
CVE-2026-65523 WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Formidable Forms Signature Online Contract Automation = 2.0.1 versions...
CVE-2026-65517
Unauthenticated Cross Site Scripting XSS in Easy PayPal Buy Now Button = 2.0.4 versions...
CVE-2026-65515
The CVE-2026-65515 entry concerns the WordPress AffiliateWP plugin, affected version
EUVD-2026-53966
Unauthenticated Cross Site Scripting XSS in Simply Schedule Appointments = 1.6.12.10 versions...
CVE-2026-65513
CVE-2026-65513 affects the WordPress plugin Simply Schedule Appointments (versions ≤ 1.6.12.10). The connected sources consistently describe an Unauthenticated XSS vulnerability impacting this plugin. The vulnerability is described without details on the exact vulnerable component, payload, or ex...