99758 matches found
EUVD-2026-76205
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62132
CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...
CVE-2026-62132 WordPress Masteriyo - LMS plugin <= 3.4.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
EUVD-2026-76207
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
CVE-2026-62113
CVE-2026-62113 is an Insecure Direct Object References (IDOR) vulnerability in the WordPress plugin Slim SEO (versions
CVE-2026-62112
CVE-2026-62112 affects the Amelia WordPress plugin in versions ≤ 2.4.9 , containing an Editor-level SQL Injection vulnerability discovered by Ananda Dhakal (Patchstack). The vulnerability requires high privileges (editor role) to exploit but carries a CVSS 3.1 score of 7.6 (HIGH) with high confid...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111 WordPress Simple Payment plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Simple Payment = 2.5.4 versions...
CVE-2026-62111
CVE-2026-62111 affects the WordPress Simple Payment plugin in versions 2.5.4 and below . The vulnerability is a Contributor-level Cross-Site Scripting (XSS) flaw, discovered by V1T via Patchstack. It carries a CVSS 3.1 score of 6.5 (MEDIUM) with a changed scope, requiring low privileges and user ...
CVE-2026-62110 WordPress Bold Page Builder plugin <= 5.9.9 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Bold Page Builder = 5.9.9 versions...
CVE-2026-62107
Masteriyo – LMS is a WordPress LMS plugin affected by an unauthenticated PHP Object Injection vulnerability in versions ≤ 3.4.0 . The flaw allows an attacker to inject a malicious serialized PHP object, potentially leading to full compromise of the site. The Patchstack CVSS 3.1 score is 8.8 (HIGH...
CVE-2026-62107 WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62109
Editor SQL Injection vulnerability in the Sky Addons for Elementor WordPress plugin, affecting versions 3.8.4 and below . Discovered by Ananda Dhakal via Patchstack, the flaw resides in the editor functionality and allows a high-privilege authenticated user to inject SQL, resulting in high confid...
CVE-2026-62109 WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
Editor SQL Injection in Sky Addons for Elementor = 3.8.4 versions...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106 WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in SMS Alert Order Notifications = 3.9.9 versions...
CVE-2026-62106
SMS Alert Order Notifications WordPress plugin (versions ≤ 3.9.9 ) is affected by a Subscriber-level privilege escalation vulnerability. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privileged (Subscriber) user can achieve hi...