100172 matches found
PT-2026-82419
The Workeera WordPress plugin before 1.0.6 does not restrict which values may be written to a user's own candidate profile, and does not validate or contain the stored file path before deleting it, allowing users with a role as low as subscriber to delete arbitrary files on the server...
PT-2026-82461
Subscriber SQL Injection in Like Button Rating = 2.6.61 versions...
PT-2026-82391
The JetBackup WordPress plugin before 3.1.23.5 does not perform its multisite authorisation check before serving backup archives and job logs, allowing an administrator of the network's main site who is not a Super Admin to download a full backup of the entire network, including every site's data...
CVE-2026-78138: Exposure of Sensitive Information to an Unauthorized Actor
The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowing any authenticated user Subscriber and above to read the Finale Lite WordPress plugin before 2.21.0's campaign...
PT-2026-82429
The Finale Lite WordPress plugin before 2.21.0 does not perform a capability check on an AJAX action that returns a sales-campaign's configuration for an arbitrary post ID, allowing any authenticated user Subscriber and above to read the Finale Lite WordPress plugin before 2.21.0's campaign...
CVE-2026-19223: Improper Control of Generation of Code
The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...
PT-2026-82430
The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, 3.1.3, allowing authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product...
CVE-2026-78139: Authorization Bypass Through User-Controlled Key
The Notifima WordPress plugin before 3.1.4 does not verify that the caller owns the subscription being modified on one of its REST endpoints in all versions up to, and including, 3.1.3, allowing authenticated attackers with Subscriber-level access to unsubscribe arbitrary customers from product...
CVE-2026-19092: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...
CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC-
CVE-2025-22777-GiveWP-Plugin-PHP-Object-Injection-Point-PoC- Questo repository contiene una Proof of Concept in lavorazione per CVE-2025-22777 che interessa il plugin GiveWP per WordPress. Le cose potrebbero cambiare, rompersi o migliorare nel tempo. Per prima cosa, clona questo repository. Sul t...
WordPress Push Notification for Post and BuddyPress plugin <= 3.20 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by JunHee CHO in WordPress Plugin Push Notification for Post and BuddyPress versions = 3.20...
WordPress Post SMTP plugin 4.0.0-beta.1 - Settings Change vulnerability
Settings Change vulnerability discovered by mad4cyber in WordPress Plugin Post SMTP versions 4.0.0-beta.1...
WordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability
SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin Suggestion Engine for WooCommerce versions = 2.0.11...
WordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Kali Forms versions = 2.4.23...
WordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentBooking Pro versions = 2.2.4...
WordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by sungbyeongchan in WordPress Plugin Ditty versions = 3.1.67...
WordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Brian Willows in WordPress Plugin GeoDirectory versions = 2.8.176...
WordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin FluentPlayer Pro versions = 1.3.2...
Exploit for CVE-2026-19632
CVE-2026-19632 — TranslatePress Unauthenticated Account Takeov...
WordPress Bit Assist plugin < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint vulnerability
Unauthenticated Arbitrary File Upload via Response Endpoint vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Bit Assist versions 1.8.2...