273366 matches found
CVE-2026-61981
CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...
CVE-2026-61973
CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected
CVE-2026-61972
Technical details about CVE-2026-61972 are not publicly provided in the supplied documents. Monitor for updates from the vendor/CVE feed as new information becomes available.
CVE-2026-61954
CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (
CVE-2026-61951
The CVE covers WordPress TrueBooker plugin <= 1.2.3 with unauthenticated privilege escalation. Public details in the connected documents confirm: affected product/component = TrueBooker WordPress plugin; vulnerability type = privilege escalation; root cause/technical specifics are not describe...
CVE-2026-61950
CVE-2026-61950 : Unauthenticated SQL injection in the WordPress plugin TrueBooker (versions <= 1.2.3). The CVE entry indicates a high-severity, network-exposed vulnerability with low attack complexity and no privileges required. The impact is highlighted as high confidentiality impact and low ...
CVE-2026-61949
CVE-2026-61949 describes an unauthenticated SQL injection in the WordPress plugin Bookly (versions
EUVD-2026-48206
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61947
The CVE covers WordPress Form Vibes – Database Manager for Forms plugin (
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
CVE-2026-61944
The CVE-2026-61944 entry concerns an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Bookly plugin, affecting versions up to 27.7. The issue lies in the Bookly plugin for WordPress and is exploitable over the network with user interaction required. CVSS v3.1 metrics indi...
CVE-2026-61946
WordPress Easy Appointments plugin
CVE-2026-61943
CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions
EUVD-2026-48202
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-59554
CVE-2026-59554 affects the WordPress Ziina plugin
CVE-2026-59555
CVE-2026-59555 affects WordPress: Participants Database plugin version
CVE-2026-59544
The CVE covers WordPress Thrive Quiz Builder plugin versions
CVE-2026-59545
The vulnerability CVE-2026-59545 affects the WordPress plugin miniOrange Discord Integration (versions