273418 matches found
CVE-2026-65460
CVE-2026-65460 affects the WordPress Zarinpal Gateway plugin (≤ 5.1.0). The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in versions ≤ 5.1.0. Attack context: network access required, with user interaction necessary for exploitation; impact details are not expanded b...
CVE-2026-65458
CVE-2026-65458 concerns the WordPress Polylang plugin, affected versions
CVE-2026-65457
Technical details about CVE-2026-65457 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65458 WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5...
CVE-2026-65458 WordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through 3.8.5...
CVE-2026-65456
CVE-2026-65456 affects the WordPress plugin Product Slider for WooCommerce (versions
CVE-2026-65454
The CVE-2026-65454 entry concerns the WordPress plugin Quiz And Survey Master (
CVE-2026-65455
CVE-2026-65455 affects the WordPress MapSVG plugin up to version 8.14.0. The vulnerability is described as an Administrator Arbitrary File Upload, with an overall CVSSv3.1 base score of 9.1 (CRITICAL) and a network attack vector, requiring high privileges and no user interaction. The reports do n...
CVE-2026-65453
Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store
CVE-2026-65452
CVE-2026-65452 affects the WordPress Ebook Store plugin up to version 6.19, with an Unauthenticated Broken Access Control vulnerability. The description in both records confirms unauthenticated access issues that impact access control, but no technical exploit steps, root cause specifics, or reme...
CVE-2026-65451
CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions <= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG
CVE-2026-65449
Technical details about CVE-2026-65449 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor patches.
CVE-2026-65450
MapSVG WordPress plugin versions <= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (
CVE-2026-61981
CVE-2026-61981 affects the WordPress plugin Simple Link Directory Pro up to version 15.0.8 . The issue is an unauthenticated Cross Site Request Forgery (CSRF) vulnerability, as described in both CVE records. No exploitation details or mitigating fixes are provided in the connected documents. The ...
CVE-2026-61973
CVE-2026-61973 applies to the WordPress ShopLentor Pro plugin, affected
CVE-2026-61972
Technical details about CVE-2026-61972 are not publicly provided in the supplied documents. Monitor for updates from the vendor/CVE feed as new information becomes available.
CVE-2026-61954
CVE-2026-61954 affects the WordPress PayU India plugin up to version 3.8.9, with an Unauthenticated Broken Access Control vulnerability. The available documents identify the affected product (WordPress PayU India plugin) and the vulnerable version range (
CVE-2026-61951
The CVE covers WordPress TrueBooker plugin <= 1.2.3 with unauthenticated privilege escalation. Public details in the connected documents confirm: affected product/component = TrueBooker WordPress plugin; vulnerability type = privilege escalation; root cause/technical specifics are not describe...
CVE-2026-61950
CVE-2026-61950 : Unauthenticated SQL injection in the WordPress plugin TrueBooker (versions <= 1.2.3). The CVE entry indicates a high-severity, network-exposed vulnerability with low attack complexity and no privileges required. The impact is highlighted as high confidentiality impact and low ...