475946 matches found
EUVD-2026-53898
Contributor Cross Site Scripting XSS in Ultimate Addons for Elementor = 1.45.2 versions...
CVE-2026-66685 WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Featured Video Plus = 2.3.3 versions...
CVE-2026-66684 WordPress Export Import Menus plugin <= 1.9.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Export Import Menus = 1.9.2 versions...
CVE-2026-66683
CVE-2026-66683 corresponds to an unauthenticated sensitive data exposure in the WordPress plugin “Custom CSS and JavaScript”, affecting versions up to and including 2.0.16. The vulnerability details indicate the issue exists in affected builds and results in exposure of sensitive data without aut...
CVE-2026-66684
Unauthenticated Sensitive Data Exposure in Export Import Menus = 1.9.2 versions...
CVE-2026-66684
The CVE-2026-66684 entry concerns the WordPress plugin Export Import Menus, affected versions ≤ 1.9.2. The vulnerability is an unauthenticated sensitive data exposure in the export/import functionality. No concrete exploit details, affected files, root cause, or remediation are provided in the av...
CVE-2026-66681
Theme My Login WordPress plugin
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
EUVD-2026-53892
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...
EUVD-2026-53891
Unauthenticated Arbitrary File Upload in Type Hub = 2.0.6 versions...
CVE-2026-66678
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...
CVE-2026-66665
CVE-2026-66665 affects the WordPress Type Hub plugin (versions
CVE-2026-66678
CVE-2026-66678 concerns a Broken Access Control issue in the WordPress plugin Advanced Custom Fields: Font Awesome Field , affecting versions up to and including 6.1.1 . The connected sources consistently describe the vulnerability class and affected plugin/version but do not provide technical de...
CVE-2026-66664
Unauthenticated Cross Site Scripting XSS in SEO Plugin by Squirrly SEO = 14.2.0 versions...
EUVD-2026-53888
Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps = 3.29.10 versions...
EUVD-2026-53889
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
EUVD-2026-53887
Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...
CVE-2026-66470 WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerability
Subscriber Broken Access Control in Frontend Admin by DynamiApps = 3.29.10 versions...