322648 matches found
WordPress Booster Elite for WooCommerce plugin < 8.4.0 - Authenticated Arbitrary WordPress Option Disclosure vulnerability
Authenticated Arbitrary WordPress Option Disclosure vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Booster Elite for WooCommerce versions 8.4.0...
CVE-2026-107432
The WordPress Event post plugin (versions
CVE-2026-107432 WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
CVE-2026-107432 WordPress Event post plugin <= 6.1.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...
WordPress TMDS plugin <= 1.0.15 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Aarush Gaur in WordPress Plugin TMDS versions = 1.0.15...
CVE-2026-107429 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12...
CVE-2026-107429 WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects Paid Videochat Turnkey Site: from n/a through 7.5.12...
CVE-2026-107429
The WordPress Paid Videochat Turnkey Site (ppv-live-webcams) plugin is vulnerable to an Improper Validation of Specified Quantity in Input vulnerability (CWE-1284) in versions up to and including 7.5.12 . This flaw allows for Input Data Manipulation . While the specific component or function is n...
CVE-2026-107427
The WordPress Event post plugin, affecting versions
WordPress Event post plugin <= 6.1.1 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by genisis-lab in WordPress Plugin Event post versions = 6.1.1...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Other vulnerability Type vulnerability
Other vulnerability Type vulnerability discovered by Erik Debye in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...
WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Erik Debye in WordPress Plugin Paid Videochat Turnkey Site versions = 7.5.12...
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence AI-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobal...
WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Gamic versions = 1.19...
WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Good Homes versions = 1.3.13...
WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Gunslinger versions = 1.11...
WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Legal Stone versions = 1.2.11...
WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by johska in WordPress Theme Le Truffe versions = 1.1.7...