CVE-2026-66461

CVE-2026-66461 is a vulnerability in the WordPress SMEPay: UPI Gateway for WooCommerce plugin (versions

CVE-2026-66462

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

CVE-2026-66461

Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce = 1.0.5 versions...

CVE-2026-66462

Summary (CVE-2026-66462) : Unauthenticated sensitive data exposure in the WordPress WooCommerce Appointments plugin, versions ≤ 5.3.8. The vulnerability affects the plugin itself (no vendor/component details beyond the plugin) and is described as unauthenticated exposure of sensitive data. No exp...

EUVD-2026-57881

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

EUVD-2026-57867

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

CVE-2026-66436

CVE-2026-66436 refers to an unauthenticated SQL injection in the WordPress plugin “Active Products Tables for WooCommerce” (versions

CVE-2026-66436

Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...

EUVD-2026-57866

Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...

CVE-2026-66436 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...

CVE-2026-66441

Unauthenticated Broken Access Control in MultiVendorX = 5.0.10 versions...

EUVD-2026-57864

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-66431

CVE-2026-66431 concerns the WordPress plugin WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) with versions up to 1.0.7. The issue is Unauthenticated Broken Access Control, meaning an attacker can access restricted functionality without authentication. The description and c...

CVE-2026-66431

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-66431 WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-27543

Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...

EUVD-2026-57931

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

CVE-2026-27345 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce = 2.0.3 versions...

CVE-2026-27345

The CVE-2026-27345 entry concerns the WordPress plugin “Taxi Booking Manager for WooCommerce” (versions

CVE-2026-19088

The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a victim into an attacker-controlled account, so that the billing and shipping details the victim then enters at checkout...