273300 matches found
CVE-2026-65484
Technical details for CVE-2026-65484 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65483
CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version
CVE-2026-65482
The CVE-2026-65482 entry concerns the WordPress LA-Studio Element Kit for Elementor plugin, affected in versions
CVE-2026-65481
CVE-2026-65481 affects WordPress Vino theme
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65479
CVE-2026-65479 affects WordPress Reviewer plugin
CVE-2026-65480
CVE-2026-65480 : WordPress TheGem theme versions ≤ 5.11.1 have a Cross Site Scripting (XSS) vulnerability. The available records note a contributor-reported XSS but do not specify the vulnerable component, root cause, affected URLs, or remediation steps. CVSS‑3.1 metrics are provided (base score ...
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
CVE-2026-65476
CVE-2026-65476 affects WordPress Civi theme versions
CVE-2026-65477
CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...
CVE-2026-65474
The CVE concerns WordPress Ninja Tables plugin
CVE-2026-65472
CVE-2026-65472 concerns a vulnerability in the WordPress Kit (formerly ConvertKit) plugin for WordPress, affecting versions
CVE-2026-65473
CVE-2026-65473 affects the WordPress Virtue/Ascend/Pinnacle Toolkit plugin (versions
CVE-2026-65471
The CVE-2026-65471 entry concerns unauthenticated Cross Site Request Forgery (CSRF) in the WordPress Avada Core plugin
CVE-2026-65469
CVE-2026-65469 affects the WordPress plugin “AWP Classifieds” up to version 4.4.7. The vulnerability is an unauthenticated Broken Access Control issue in AWP Classifieds
CVE-2026-65470
CVE-2026-65470 describes a Cross Site Scripting (XSS) vulnerability in the WordPress Fluent Support plugin, affecting versions
CVE-2026-65468
Affected product: WordPress JetBooking plugin
CVE-2026-65467
CVE-2026-65467 corresponds to a Server Side Request Forgery (SSRF) vulnerability in the WordPress JetEngine plugin, affecting versions up to 3.8.11. The issue is described as SSRF in JetEngine
CVE-2026-65466
CVE-2026-65466 concerns a Server Side Request Forgery (SSRF) in the WordPress JetBooking plugin <= 4.1.2 . The description specifies a custom role -driven SSRF vulnerability affecting JetBooking versions up to 4.1.2. The CVSSv3.1 metrics (source: Patchstack) indicate a network attack vector , ...