270203 matches found
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
EUVD-2026-53981
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-65554
The CVE-2026-65554 entry concerns the WordPress AnsPress – Question and Answer plugin version 4.4.4, with a Broken Access Control vulnerability affecting subscribers. The available connected sources confirm the affected software and the underlying issue as access control in the plugin’s subscribe...
CVE-2026-65553
Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (
CVE-2026-65554 WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...
CVE-2026-65552
CVE-2026-65552 concerns the WordPress Export User Data plugin (versions
CVE-2026-65548 WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-65549
Summary: CVE-2026-65549 concerns the WordPress plugin Jeg Kit for Elementor, affected
CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-65548
The connected sources confirm a Remote Code Execution (RCE) vulnerability affecting WordPress Betheme theme versions
CVE-2026-65547
CVE-2026-65547 is a SQL injection vulnerability in the WordPress Creative Mail plugin, affecting versions ≤ 1.6.9. The issue targets subscriber handling and is documented across multiple sources (NVD/CVELIST, patchstack, EUVD). No exploitation status or in-the-wild details are provided in the con...
CVE-2026-65547 WordPress Creative Mail plugin <= 1.6.9 - SQL Injection vulnerability
Subscriber SQL Injection in Creative Mail = 1.6.9 versions...
CVE-2026-65545
CVE-2026-65545 concerns the WordPress plugin AI Engine (versions
CVE-2026-65546 WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...
CVE-2026-65546
CVE-2026-65546 affects the WordPress plugin Qode Tours (versions
CVE-2026-65545 WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...
CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Super Socializer = 7.14.5 versions...
CVE-2026-65544
The vulnerability CVE-2026-65544 affects the WordPress plugin Super Socializer (versions <= 7.14.5). It is an unauthenticated Cross-Site Scripting (XSS) flaw in the plugin’s handling of input, with a CVSS v3.1 base score of 7.1 (HIGH) and network attack vector, requiring user interaction. No e...