273318 matches found
CVE-2026-65493
The CVE-2026-65493 entry concerns the WordPress Dokan Pro plugin (
CVE-2026-65491
Technical details for CVE-2026-65491 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65489
CVE-2026-65489 affects the WordPress plugin “LA-Studio Element Kit for Elementor” up to version 1.6.2. The issue is described as Unauthenticated Broken Access Control, allowing access to restricted functionality without credentials. The referenced CVSS 3.1 base score is 5.3 (MEDIUM) with network ...
CVE-2026-65488
The CVE concerns the WordPress plugin LA-Studio Element Kit for Elementor, version <= 1.6.2. It describes an unauthenticated Cross-Site Request Forgery (CSRF) that can lead to Stored XSS. The issue originates from the plugin’s handling of CSRF, enabling an attacker to trigger stored XSS withou...
CVE-2026-65487
CVE-2026-65487 affects the WordPress Photography theme (versions
CVE-2026-65486
CVE-2026-65486 affects the WordPress plugin Event post (
CVE-2026-65486 WordPress Event post plugin <= 6.0.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Event post = 6.0.1 versions...
CVE-2026-65485
CVE-2026-65485 affects the WordPress plugin Content Control
CVE-2026-65484
Technical details for CVE-2026-65484 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65483
CVE-2026-65483 describes a Cross Site Scripting (XSS) vulnerability in the WordPress plugin HashThemes Demo Importer, version
CVE-2026-65482
The CVE-2026-65482 entry concerns the WordPress LA-Studio Element Kit for Elementor plugin, affected in versions
CVE-2026-65481
CVE-2026-65481 affects WordPress Vino theme
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65479
CVE-2026-65479 affects WordPress Reviewer plugin
CVE-2026-65480
CVE-2026-65480 : WordPress TheGem theme versions ≤ 5.11.1 have a Cross Site Scripting (XSS) vulnerability. The available records note a contributor-reported XSS but do not specify the vulnerable component, root cause, affected URLs, or remediation steps. CVSS‑3.1 metrics are provided (base score ...
CVE-2026-65480 WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...
CVE-2026-65478
CVE-2026-65478 affects the WordPress ListingPro plugin (versions
CVE-2026-65476
CVE-2026-65476 affects WordPress Civi theme versions
CVE-2026-65477
CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...