319118 matches found
CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...
CVE-2026-62021 WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Angio = 1.1.1 versions...
CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
Administrator SQL Injection in Leyka = 3.32.3 versions...
CVE-2026-42717
The WordPress Leyka plugin (versions
CVE-2026-42709 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...
CVE-2026-42699 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in FV Player 8 = 8.1.8 versions...
CVE-2026-42699
The WordPress FV Player 8 plugin (versions
CVE-2026-42697
The WordPress Social Share Icons & Social Share Buttons plugin (versions
CVE-2026-40802 WordPress Pubjet | پابجت plugin <= 5.4.8 - Settings Change vulnerability
Subscriber Settings Change in Pubjet | پابجت = 5.4.8 versions...
CVE-2026-39801
The WordPress AIWU plugin (versions
CVE-2026-39802 WordPress Everest Backup plugin <= 2.3.13 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Everest Backup = 2.3.13 versions...
CVE-2026-57806
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...
CVE-2026-105892
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13...
CVE-2026-94590
The CodePeople2 Sell Downloads WordPress plugin, affecting versions up to and including 1.2.3 , contains a Broken Access Control vulnerability. This issue is characterized as an Improper Verification of Source of a Communication Channel , which can lead to the Exploitation of Trusted Credentials ...
CVE-2026-94590 WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...
CVE-2026-57806
The drfuri Martfury - WooCommerce Marketplace WordPress Theme is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions up to and including 3.3.9 . An attacker could exploit this to execute maliciou...
CVE-2026-57806 WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...
EUVD-2026-96398
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...
CVE-2026-105892 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.7.13...