273221 matches found
CVE-2026-65486 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event post = 6.0.1 versions...
CVE-2026-65485
CVE-2026-65485 affects the WordPress plugin Content Control
CVE-2026-65484
Technical details for CVE-2026-65484 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65483
CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version
CVE-2026-65482
The CVE-2026-65482 entry concerns the WordPress LA-Studio Element Kit for Elementor plugin, affected in versions
CVE-2026-65481
CVE-2026-65481 affects WordPress Vino theme
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65479
CVE-2026-65479 affects WordPress Reviewer plugin
CVE-2026-65480
CVE-2026-65480 : WordPress TheGem theme versions ≤ 5.11.1 have a Cross Site Scripting (XSS) vulnerability. The available records note a contributor-reported XSS but do not specify the vulnerable component, root cause, affected URLs, or remediation steps. CVSS‑3.1 metrics are provided (base score ...
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
CVE-2026-65476
CVE-2026-65476 affects WordPress Civi theme versions
CVE-2026-65477
CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...
CVE-2026-65474
The CVE concerns WordPress Ninja Tables plugin
CVE-2026-65473
CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions
CVE-2026-65472
CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions
CVE-2026-65471
The CVE-2026-65471 entry concerns unauthenticated Cross Site Request Forgery (CSRF) in the WordPress Avada Core plugin
CVE-2026-65469
CVE-2026-65469 affects the WordPress plugin “AWP Classifieds” up to version 4.4.7. The vulnerability is an unauthenticated Broken Access Control issue in AWP Classifieds