100199 matches found
CVE-2026-66454 WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66455
CVE-2026-66455 affects the WordPress ReactPress plugin up to version 3.4.0, described as a Subscriber Broken Access Control vulnerability. The NVD entry links a MEDIUM impact (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) with network attack vector and low confidentiality, integrity, and availab...
CVE-2026-66454
CVE-2026-66454 affects the WordPress WP Social Avatar plugin (versions
CVE-2026-66454
Unauthenticated Broken Access Control in WP Social Avatar = 1.5 versions...
CVE-2026-66453 WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Salon booking system = 10.30.26 versions...
CVE-2026-66453
CVE-2026-66453 affects the WordPress Salon Booking System plugin,
EUVD-2026-57872
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-66450
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-66449
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
EUVD-2026-57871
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
CVE-2026-66449 WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Geo Mashup = 1.13.18 versions...
CVE-2026-66444
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66443 WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
CVE-2026-66443 WordPress REST API Log plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
CVE-2026-66444 WordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability
Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...
CVE-2026-66444
Affected software: WordPress Payment Forms for Paystack plugin
CVE-2026-66441
CVE-2026-66441 affects WordPress MultiVendorX plugin versions up to 5.0.10, with unauthenticated broken access control. The available sources identify the affected product and the vulnerability class but do not provide a confirmed patch version or remediation steps. CVSS v3.1 base score 7.5 (HIGH...
CVE-2026-66436 WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Active Products Tables for WooCommerce = 1.1.1 versions...