99473 matches found
CVE-2026-81796
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
CVE-2026-81801
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81786
Unauthenticated Broken Access Control in Thank You Page Customizer for WooCommerce = 1.2.2 versions...
CVE-2026-81787
Unauthenticated Broken Authentication in IMPress for IDX Broker = 3.3.0 versions...
CVE-2026-81275
Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin <= 1.0.23 - Missing Authorization vulnerability
WordPress Booktics - Booking Calendar for Appointments and Service Businesses plugin = 1.0.23 - Missing Authorization vulnerability discovered by revblock in WordPress Plugin Booktics versions = 1.0.23...
CVE-2026-84821
CVE-2026-84821 affects the WP Fast Total Search WordPress plugin in versions
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84821 WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
EUVD-2026-75536
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-84816 WordPress WPCS plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPCS = 1.3.2 versions...
CVE-2026-84819 WordPress WPAdverts plugin <= 2.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.3 versions...
CVE-2026-81805
CVE-2026-81805 is an unauthenticated privilege escalation vulnerability affecting the SiteSkite WordPress plugin in versions 2.1.5 and earlier . A remote attacker with no prior authentication can escalate privileges on the target site, resulting in high impact on confidentiality, integrity, and a...
CVE-2026-81805 WordPress SiteSkite plugin <= 2.1.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SiteSkite = 2.1.5 versions...
CVE-2026-81803 WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
CVE-2026-81803 WordPress RepairBuddy plugin <= 4.1224 - Remote Code Execution (RCE) vulnerability
Subscriber Remote Code Execution RCE in RepairBuddy = 4.1224 versions...
CVE-2026-81804 WordPress ZHBackup – Backup, Restore & Migration plugin <= 2.4.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration = 2.4.2 versions...
CVE-2026-81803
CVE-2026-81803 affects the WordPress RepairBuddy plugin in versions 4.1224 and below . A Subscriber-level (low-privilege) user can achieve Remote Code Execution (RCE) , meaning any authenticated user with the lowest typical WordPress role could potentially execute arbitrary code on the server. Th...
CVE-2026-81804
ZHBackup – Backup, Restore & Migration WordPress plugin versions up to and including 2.4.2 are affected by an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows an attacker to retrieve sensitive data over the network without any prior authentication or user interaction. The CV...