273001 matches found
PT-2026-65410
The WP Fast Total Search – The Power of Indexed Search plugin for WordPress is vulnerable to generic SQL Injection via the 'form datas' parameter in all versions up to, and including, 1.80.280 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
PT-2026-65431
The Eazy Plugin Manager – Powerful Plugin Management Solution for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.4.1. This is due to insufficient authorization on the wp ajax pos get option AJAX handler, which verifies only a nonce tha...
PT-2026-65450
The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcs send email AJAX handler. This is due to the wpcs send email function being registered on both wp ajax wpcs send email and wp ajax nopriv wpcs send email with no nonce...
WordPress WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action vulnerability
Unauthenticated Sensitive Information Exposure in 'wpbotsendemailtranscript' AJAX Action vulnerability discovered by Wordfence PRISM in WordPress Plugin ChatBot versions = 8.5.9...
WordPress WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay vulnerability
Missing Authorization to Unauthenticated Email Relay vulnerability discovered by Wordfence PRISM in WordPress Plugin ChatBot versions = 8.5.9...
CVE-2026-65447 WordPress Contest Gallery plugin <= 30.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Contest Gallery = 30.0.6 versions...
CVE-2026-65448
CVE-2026-65448 affects the WordPress plugin Anti Spam and list cleaner — AcyChecker, specifically versions
CVE-2026-65448 WordPress Anti Spam and list cleaner – AcyChecker plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Anti Spam and list cleaner AcyChecker = 1.8.1 versions...
CVE-2026-65447
CVE-2026-65447 concerns an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress plugin Contest Gallery , affecting versions up to 30.0.6 . The root cause is an XSS flaw that can be triggered without authentication, with CVSS v3.1 metrics indicating a base score of 7.1 (HIGH),...
CVE-2026-65446
CVE-2026-65446 affects the WordPress Kali Forms plugin up to version 2.4.18, with an unauthenticated Cross Site Scripting (XSS) vulnerability reported. The connected documents specify an XSS flaw in Kali Forms
CVE-2026-65446 WordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Kali Forms = 2.4.18 versions...
CVE-2026-65445 WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...
CVE-2026-65443 WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in BackWPup = 5.7.4 versions...
CVE-2026-65443
CVE-2026-65443 corresponds to an unauthenticated Cross Site Scripting (XSS) vulnerability in the BackWPup WordPress plugin, affecting versions up to 5.7.4. The NVD entry and related records confirm the issue and CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, low attack complexity,...
CVE-2026-65442 WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442
The CVE-2026-65442 entry concerns the WordPress FormCraft plugin up to version 3.9.15 with an unauthenticated Server-Side Request Forgery (SSRF) vulnerability. Documentation from multiple sources confirms the affected product (FormCraft) and the vulnerability class (SSRF) but does not provide roo...
CVE-2026-65441
CVE-2026-65441 affects WordPress plugin GiveWP up to version 4.16.3, with an Unauthenticated Cross-Site Scripting (XSS) vulnerability. Descriptions in connected documents indicate the issue is present in GiveWP
CVE-2026-65440
GetGenie WordPress plugin