273418 matches found
EUVD-2026-48206
Unauthenticated SQL Injection in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-61947
The CVE covers WordPress Form Vibes – Database Manager for Forms plugin (
CVE-2026-61948
WordPress WPDM – Premium Packages plugin ≤ 6.2.0 is affected by unauthenticated SQL injection. The vulnerability is documented in CVE-2026-61948 with a CVSS v3.1 base score of 9.3 (CRITICAL) and a network attack vector, no privileges required, no user interaction. Details indicate the issue is an...
CVE-2026-61944
The CVE-2026-61944 entry concerns an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress Bookly plugin, affecting versions up to 27.7. The issue lies in the Bookly plugin for WordPress and is exploitable over the network with user interaction required. CVSS v3.1 metrics indi...
CVE-2026-61946
WordPress Easy Appointments plugin
CVE-2026-61943
CVE-2026-61943 describes an unauthenticated Broken Access Control in the WordPress WPDM – Premium Packages plugin, affected versions
EUVD-2026-48202
Unauthenticated Broken Access Control in WPDM – Premium Packages = 6.2.0 versions...
CVE-2026-59554
CVE-2026-59554 affects the WordPress Ziina plugin
CVE-2026-59555
CVE-2026-59555 affects WordPress: Participants Database plugin version
CVE-2026-59544
The CVE covers WordPress Thrive Quiz Builder plugin versions
CVE-2026-59545
The vulnerability CVE-2026-59545 affects the WordPress plugin miniOrange Discord Integration (versions
CVE-2026-59543
CVE-2026-59543 describes a Remote Code Execution (RCE) vulnerability in the WordPress Advanced Views plugin, affecting versions
CVE-2026-59541
Affected software: WordPress WP BASE Booking plugin
CVE-2026-59542
The vulnerability CVE-2026-59542 affects the WordPress Kali Forms plugin
EUVD-2026-48194
Subscriber Privilege Escalation in WP BASE Booking = 6.3.1 versions...
CVE-2026-59540
The CVE concerns WordPress plugin SMS Alert Order Notifications, affected in versions
CVE-2026-59526
CVE-2026-59526 : Unauthenticated SQL injection in WordPress MapSVG plugin ≤ 8.14.0. Reported as a critical vulnerability (CVSS 3.1: 9.3) with network access and no privileges required; confidentiality impact High, availability Low, no integrity impact. The connected documents confirm the issue bu...
CVE-2026-59525
The CVE covers the WordPress plugin Participants Database (affected version:
CVE-2026-59524
The CVE concerns WordPress Easy Digital Downloads plugin ≤ 3.6.7 with Unauthenticated Broken Authentication . Affected component: the EDD plugin for WordPress; versions up to 3.6.7 are implicated. Root cause details are not specified in the provided documents. Impact is described as unauthenticat...