322338 matches found
WordPress Salevo plugin <= 1.3.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dcs in WordPress Plugin Salevo versions = 1.3.0...
WordPress Subscribe to Comments plugin < 2.3.3 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Het Kalariya in WordPress Plugin Subscribe to Comments versions 2.3.3...
WordPress Piotnet Forms plugin <= 1.0.30 - Unauthenticated Stored XSS vulnerability
Unauthenticated Stored XSS vulnerability discovered by Claude Ndanda TrixX in WordPress Plugin Piotnet Forms versions = 1.0.30...
WordPress Veeqo for WooCommerce plugin <= 2.2.8 - Subscriber+ Arbitrary File Upload vulnerability
Subscriber+ Arbitrary File Upload vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Veeqo for WooCommerce versions = 2.2.8...
WordPress Datalist it plugin <= 0.0.3 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin Datalist it versions = 0.0.3...
WordPress Premium Addons for Elementor plugin <= 4.11.110 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Premium Addons for Elementor versions = 4.11.110...
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Quiz And Survey Master versions = 11.2.7...
WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by dzeusking in WordPress Plugin Booktics versions = 1.0.28...
CVE-2026-108478 WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.8...
WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by nh4tvd in WordPress Plugin Element Pack Elementor Addons versions = 8.8.8...
CVE-2026-108475
The VideoWhisper.com Broadcast Live Video WordPress plugin (versions
CVE-2026-108475 WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Broadcast Live Video: from n/a through 7.3.6...
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
CVE-2026-108476 WordPress Paid Videochat Turnkey Site plugin <= 7.5.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.13...
WordPress Broadcast Live Video plugin <= 7.3.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin Broadcast Live Video versions = 7.3.6...
WordPress paymendo plugin <= 1.1 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin paymendo versions = 1.1...
WordPress paymendo plugin <= 1.1 - Unauthenticated Blind SQLi vulnerability
Unauthenticated Blind SQLi vulnerability discovered by Enrico Marcolini - Claudio Marchesini - Dottor Marc in WordPress Plugin paymendo versions = 1.1...
WordPress Post Voting System plugin <= 1.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Post Voting System versions = 1.0...
WordPress Loja Automática plugin <= 1.0.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Loja Automática versions = 1.0.0...
WordPress ASPL Product Quotation plugin <= 1.1.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin ASPL Product Quotation versions = 1.1.0...