99980 matches found
WordPress My Agile Privacy® plugin <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions vulnerability
Missing Authorization to Unauthenticated Plugin Settings Modification via mapmissingcookieshield / mapcheckconsentmodestatus AJAX Actions vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin My Agile Privacy versions = 3.3.6...
CVE-2026-78468
CVE-2026-78468 is a reservation duplicate of CVE-2026-78270 . Per connected documents, the underlying vulnerability affects the FluentCRM Pro WordPress plugin in all versions up to and including 3.1.12 . The root cause is SQL Injection due to insufficient escaping on user-supplied parameters and ...
CVE-2026-78468
...
EUVD-2026-65579
The FluentCRM Pro – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 3.1.12 due to insufficient escaping on the user supplied parameter and lack of sufficient...
400,000 WordPress Sites Affected by Account Takeover Vulnerability in TranslatePress WordPress Plugin
On August 11th, 2026, we received a submission for an Unauthenticated Account Takeover vulnerability in TranslatePress, a WordPress plugin with more than 400,000 active installations. This vulnerability makes it possible for unauthenticated attackers to obtain an administrator's password reset...
WordPress Drag and Drop Multiple File Upload for WooCommerce plugin < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle vulnerability
Unauthenticated File Deletion via Nonce Oracle vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Drag and Drop Multiple File Upload for WooCommerce versions 1.1.8...
WordPress MStore API plugin < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability
Subscriber+ Order and Customer PII Disclosure via IDOR vulnerability discovered by Sai Praneeth Koti in WordPress Plugin MStore API versions 4.21.0...
WordPress Simply Schedule Appointments plugin < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability
Contributor+ Sensitive Data Disclosure via Admin Shortcode vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin Simply Schedule Appointments versions 1.6.12.11...
WordPress LatePoint plugin < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability
Unauthenticated Booking Object Mass Assignment via Public Booking Funnel vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin LatePoint versions 5.6.8...
WordPress RealHomes Memberships plugin < 3.1.0 - Subscriber+ Membership Payment Bypass vulnerability
Subscriber+ Membership Payment Bypass vulnerability discovered by Pablo González and Fran Ramírez in WordPress Plugin RealHomes Memberships versions 3.1.0...
WordPress Hotel Booking Lite plugin < 6.2.3 - Subscriber+ Customer Data Modification via IDOR vulnerability
Subscriber+ Customer Data Modification via IDOR vulnerability discovered by Haitam Lazaar in WordPress Plugin Hotel Booking Lite versions 6.2.3...
WordPress TaxoPress plugin < 3.51.0 - Contributor+ Private Post Disclosure via IDOR vulnerability
Contributor+ Private Post Disclosure via IDOR vulnerability discovered by Duy Tran in WordPress Plugin TaxoPress versions 3.51.0...
WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation vulnerability
Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...
WordPress Subscriptions for WooCommerce plugin < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR vulnerability
Subscriber+ Subscription Detail Disclosure via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Subscriptions for WooCommerce versions 2.0.1...
WordPress RegistrationMagic plugin < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability
Unauthenticated Payment Bypass via Amount-Blind PayPal Verification vulnerability discovered by Pedro Pinho in WordPress Plugin RegistrationMagic versions 6.0.9.5...
WordPress WP Hotel Booking plugin < 2.3.2 - Unauthenticated PayPal Payment Bypass vulnerability
Unauthenticated PayPal Payment Bypass vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin WP Hotel Booking versions 2.3.2...
WordPress WP Hotel Booking plugin < 2.3.3 - Unauthenticated Payment Bypass via Price Manipulation vulnerability
Unauthenticated Payment Bypass via Price Manipulation vulnerability discovered by reconnaissance in WordPress Plugin WP Hotel Booking versions 2.3.3...
WordPress Password Protected plugin < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API vulnerability
Unauthenticated Sensitive Information Exposure via REST API vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Password Protected versions 2.8.4...
WordPress Simple Membership plugin < 4.7.7 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability
Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Simple Membership versions 4.7.7...