319674 matches found
CVE-2026-62066 WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Volos = 1.2 versions...
CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Splendour = 1.23 versions...
CVE-2026-62038
The eRoom WordPress plugin versions
CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...
EUVD-2026-96470
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...
CVE-2026-62035
The AWS S3 for WordPress Plugin (specifically the Upcasted version) is vulnerable to a Broken Access Control issue in versions
CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...
CVE-2026-62030 WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in StreamCast = 2.4.5 versions...
CVE-2026-62030
The StreamCast WordPress plugin versions
CVE-2026-62025
The Tailored Tools plugin for WordPress (versions
CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...
CVE-2026-62021 WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Angio = 1.1.1 versions...
CVE-2026-42717
The WordPress Leyka plugin (versions
CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability
Administrator SQL Injection in Leyka = 3.32.3 versions...
CVE-2026-42709 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...
CVE-2026-42699 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in FV Player 8 = 8.1.8 versions...
CVE-2026-42699
The WordPress FV Player 8 plugin (versions
CVE-2026-42697
The WordPress Social Share Icons & Social Share Buttons plugin (versions