CVE-2026-16060

The CVE concerns the WordPress plugin “Insert or Embed Articulate Content” up to version 4.3000000027. It fails to validate uploaded archives, relying on a bypassable check, enabling an Editor-level user to upload a server-executable file into a public directory, which can lead to remote code exe...

EUVD-2026-52181

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

EUVD-2026-52176

The Simple Membership WordPress plugin before 4.7.8 does not sanitise a subscriber name value received from an unauthenticated payment approval request, nor escape it when displaying it in the administration dashboard, allowing unauthenticated attackers to store arbitrary JavaScript that executes...

CVE-2026-16300 Chama < 1.0.13 - Unauthenticated Arbitrary User Password Reset

The ChamaWP WordPress plugin before 1.0.13 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover...

CVE-2026-15383

The CVE-2026-15383 entry concerns the Blog Floating Button WordPress plugin (versions up to and including 1.4.20). Affected component: the visitor User-Agent header is not sanitized/escaped when stored via an unauthenticated tracking REST endpoint and later rendered unescaped in an administrator ...

EUVD-2026-52174

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...

EUVD-2026-52175

The Simple Membership WordPress plugin before 4.7.8 does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, allowing unauthenticated attackers to overwrite the primary administrator's account data including the email...

EUVD-2026-52171

The SoftMarket — Digital Marketplace WordPress plugin through 1.0.0 does not properly validate an authentication token in one branch of its email-verification flow, allowing unauthenticated attackers to obtain a valid session as any verified user by supplying only that user's ID...

CVE-2026-14557

The SoftMarket — Digital Marketplace WordPress plugin (≤1.0.0) contains an authentication-token validation flaw in the email-verification flow. An unauthenticated attacker can obtain a valid session as any verified user by supplying only that user’s ID, enabling account takeover via session imper...

EUVD-2026-52172

The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 does not verify that a user is authorized to access a referenced post before processing it and returning derived data, allowing users with contributor privileges to disclose data from private or draft posts they do not own...

CVE-2026-15930

The CVE concerns the Simple Membership WordPress plugin prior to version 4.7.8. It does not verify whether user creation failed during registration before using the returned value as a user ID to update an account, enabling an unauthenticated attacker to overwrite the primary administrator’s acco...

CVE-2026-15383 Blog Floating Button <= 1.4.20 - Unauthenticated Stored XSS via User-Agent Header

The Blog Floating Button WordPress plugin through 1.4.20 does not sanitize or escape the visitor User-Agent header, which it stores through an unauthenticated tracking REST endpoint and later renders unescaped in an administrator report page. This allows an unauthenticated attacker to store a...

CVE-2026-15231

The CVE-2026-15231 entry affects the WordPress plugin “Tag, Category, and Taxonomy Manager” (TaxoPress) prior to version 3.51.0. Root cause: the plugin fails to verify a user’s authorization to access the referenced post before processing it and returning derived data. Impact: users with contribu...

CVE-2025-15672

The CVE concerns the ChamaWP WordPress plugin before 1.0.13. Affected component: PHP deserialization pathway where user input is not properly validated before being passed to a deserialization function. Root cause: unvalidated input enables unauthenticated attackers to inject arbitrary PHP object...

CVE-2026-12965 Super Store Finder <= 7.8 - Unauthenticated SQL Injection via ssf_tracking

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-13340 SVG Support < 2.5.17 - Author+ Stored XSS via .svgz Sanitization Bypass

The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz extension, even though it registers and serves them as SVG, allowing a user permitted to upload SVGs such as an Author once granted upload access to store a script-bearing file tha...

EUVD-2025-210597

The Import and export users and customers WordPress plugin before 2.4.3 does not restrict the path of a file it reads and displays during a CSV import, allowing high-privileged users to read arbitrary files on the server...

EUVD-2026-52169

The Super Store Finder WordPress plugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX action before using it in a SQL query, allowing unauthenticated attackers to perform SQL injection and extract data from the database...

CVE-2026-12872

The CVE-2026-12872 entry concerns the Webinfos WordPress plugin (≤ 1.2). The core issue is that the plugin does not validate upload file type/name and does not enforce authentication, capability checks, or nonces for uploads. This allows unauthenticated attackers to upload arbitrary files (includ...

EUVD-2026-52168

The Webinfos WordPress plugin through 1.2 does not validate the type or name of uploaded files, nor restrict the upload action with any authentication, capability, or nonce check, allowing unauthenticated attackers to upload arbitrary files including PHP to a web-accessible directory, leading to...