273064 matches found
CVE-2026-65534
CVE-2026-65534 concerns the WordPress plugin "Custom links in Elementor Image Carousel" (versions
CVE-2026-65531 WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
CVE-2026-65531 WordPress Qubely plugin <= 1.8.14 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Qubely = 1.8.14 versions...
CVE-2026-65532 WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Injection vulnerability
Shop manager SQL Injection in Persian Woocommerce SMS = 7.2.2 versions...
CVE-2026-65531
CVE-2026-65531 affects WordPress Qubely plugin versions up to 1.8.14 with an unauthenticated broken access control vulnerability. Connected documents confirm unauthenticated access and broken access control but do not provide root cause, affected files, exploitation details, or a fix. CVSS/metric...
CVE-2026-65532
CVE-2026-65532 concerns the WordPress Persian Woocommerce SMS plugin, affected
CVE-2026-65530
Technical details for CVE-2026-65530 are not publicly available in the provided documents; the description notes a broken access control in TemplateSpare
CVE-2026-65529
Technical details are not publicly available in the provided documents; monitor for updates on the Graphina WordPress plugin
CVE-2026-65528
The CVE-2026-65528 entry concerns the WordPress BSK PDF Manager plugin (versions up to 3.8) with a Cross Site Scripting (XSS) vulnerability. The root cause is XSS in this plugin version, affecting the product where user input is not properly sanitized. The documents do not provide details on the ...
CVE-2026-65527
The CVE-2026-65527 entry covers a Cross Site Scripting (XSS) vulnerability in the WordPress LIQUID SPEECH BALLOON plugin, affected versions
CVE-2026-65525
CVE-2026-65525 affects the WordPress Civi Framework plugin up to version 2.2.0. The issue is unauthenticated broken access control, enabling access to resources or actions that should be restricted. The available documents identify the affected software and the vulnerability class but do not prov...
CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65526 WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeisle Visualizer allows Blind SQL Injection. This issue affects Visualizer: from n/a through 4.0.1...
CVE-2026-65526
The CVE-2026-65526 entry concerns the WordPress Visualizer plugin (versions up to and including 4.0.6). The vulnerability is described as a Contributor SQL Injection in Visualizer
CVE-2026-65524
Technical details for CVE-2026-65524 are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-48124
Contributor Cross Site Scripting XSS in Manual - Documentation, Knowledge Base & Education WordPress Theme = 7.5.4 versions...
CVE-2026-65521
Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-65521.
EUVD-2026-48123
Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...
