CVE-2026-106029

The WeddingCity Lite WordPress plugin, in versions through 1.0.4 , is vulnerable to an authorization bypass. The plugin fails to perform necessary authorization or validity checks before processing requests to delete content. This flaw allows unauthenticated attackers to permanently delete arbitr...

CVE-2026-104680

The Envira Gallery WordPress plugin versions prior to 1.16.2 is vulnerable to a privilege escalation flaw. The plugin fails to verify that a user possesses the specific capability reserved by WordPress for installing its code before processing a setup-wizard installation request. Additionally, it...

CVE-2026-104684

The Envira Gallery WordPress plugin, in versions prior to 1.16.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) via shortcode. The plugin fails to verify if a user is authorized to read a gallery before rendering it. This flaw allows authors to embed and expose non-public gallery m...

CVE-2026-104682

The Envira Gallery WordPress plugin (versions prior to 1.16.2 ) is vulnerable to a missing authorization flaw in its gallery-conversion feature. The root cause is that the plugin fails to properly verify if a requester is authorized to create specific gallery content, instead only checking if the...

CVE-2026-104681

The Envira Gallery WordPress plugin versions prior to 1.16.2 is vulnerable to unauthorized information disclosure. The root cause is a failure to verify that an image identifier added to a gallery corresponds to a media attachment the caller is permitted to access. This allows users with gallery ...

EUVD-2026-96741

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

EUVD-2026-96739

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...

EUVD-2026-96742

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

EUVD-2026-96744

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

EUVD-2026-96740

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

EUVD-2026-96743

The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide...

CVE-2026-104680 Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installation via Onboarding Wizard

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...

CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

CVE-2026-104684 Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

CVE-2026-104681 Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosure via Gallery REST Field

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

CVE-2026-106029 WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion

The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide...

CVE-2026-107507 Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit

The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password, comment settings and date of a sport they are assigned to...

CVE-2026-103305

The Prenotazioni WordPress plugin (versions through 1.7.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a lack of authorisation and CSRF checks when saving settings, combined with insufficient escaping of those settings when they are outputted. This allows unauthenticat...

CVE-2026-12980

The Post Snippets WordPress plugin, affecting versions through 4.2.4 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape variable values substituted into snippets before they are outputted to the page. This flaw allows users with Contributor rol...

CVE-2026-103694

The Mobile builder WordPress plugin (versions through 1.4.2 ) is vulnerable to a privilege escalation flaw. The plugin fails to properly restrict which user meta keys a logged-in user can update via one of its REST routes . This allows any user with a self-registered account, such as a customer, ...