100182 matches found
CVE-2026-66660
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66656
CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.
CVE-2026-66657
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
EUVD-2026-57896
Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...
CVE-2026-66657
The CVE-2026-66657 entry describes an Unauthenticated Local File Inclusion in the WordPress Biagiotti Core plugin, versions
CVE-2026-66654 WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
EUVD-2026-57893
Subscriber Server Side Request Forgery SSRF in Vehica Core = 1.0.104 versions...
CVE-2026-66654
CVE-2026-66654 : A Subscriber Server-Side Request Forgery (SSRF) vulnerability affects WordPress Vehica Core plugin (versions
CVE-2026-66655 WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in MultiParcels Shipping For WooCommerce = 1.30.36 versions...
CVE-2026-66653
CVE-2026-66653 corresponds to an unauthenticated Local File Inclusion in WordPress Barista theme (versions <= 2.5.1). The vulnerability affects the Barista theme’s file handling, enabling LFI with a high severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are stated as...
EUVD-2026-57892
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
EUVD-2026-57891
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478 WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66471
Subscriber Cross Site Scripting XSS in Accordion = 3.0.6 versions...
CVE-2026-66469 WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...