100199 matches found
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28174
Technical details, affected components, exploit vectors, and remediation are not publicly provided in the supplied documents; monitor for updates.
EUVD-2026-57956
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28170
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28170
CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions
EUVD-2026-57955
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28168
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
EUVD-2026-57953
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28155 WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
CVE-2026-28149
Unauthenticated PHP Object Injection in Headless Single Sign On = 1.6 versions...
CVE-2026-28149
The CVE-2026-28149 entry covers an Unauthenticated PHP Object Injection in the WordPress Headless Single Sign On plugin versions <= 1.6. The underlying issue is a PHP object injection vulnerability that can be exploited without authentication, leading to high impact on confidentiality, integri...
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...