275962 matches found
CVE-2026-66448
WordPress Gallery PhotoBlocks plugin ≤ 1.3.3 has a Cross Site Scripting (XSS) vulnerability in contributor contexts. Affected product: Gallery PhotoBlocks plugin for WordPress (versions up to 1.3.3). Root cause details are not provided in the documents. CVSSv3.1 base score 6.5 (AV:N/AC:L/PR:L/UI:...
CVE-2026-66445
The CVE refers to CVE-2026-66445, describing a Cross Site Scripting (XSS) vulnerability in the WordPress Open User Map plugin, versions
CVE-2026-66442 WordPress YayPricing plugin <= 3.5.6 - Broken Access Control vulnerability
Subscriber Broken Access Control in YayPricing = 3.5.6 versions...
CVE-2026-66442
CVE-2026-66442 concerns the WordPress plugin YayPricing <= 3.5.6 , reported as Broken Access Control . The CVE record cites a network-based issue with low persistence of impact: confidentiality = none, integrity = low, availability = low; privileges required = low, user interaction = none. No ...
CVE-2026-66438
Summary: CVE-2026-66438 affects WordPress, specifically the Exclusive Addons Elementor plugin, versions
CVE-2026-66437
WordPress Feedzy plugin vulnerability CVE-2026-66437 affects Feedzy
CVE-2026-66437 WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability
Contributor Server Side Request Forgery SSRF in Feedzy = 5.2.4 versions...
CVE-2026-66438 WordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor = 2.8.0 versions...
CVE-2026-66434
Photonic Gallery & Lightbox for Flickr, SmugMug & Others WordPress plugin ≤ 3.33 is affected by a Cross Site Scripting (XSS) vulnerability. CVSSv3.1 base score 6.5 (MEDIUM) with network access, low privileges, user interaction required. Root cause and remediation details are not provided in the d...
CVE-2026-66434 WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.33 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...
CVE-2026-66428
WP Google Review Slider plugin for WordPress (
CVE-2026-66428
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...
CVE-2026-66433
CVE-2026-66433 affects the WordPress plugin Location Weather (versions <= 3.0.6). The vulnerability is a Cross Site Scripting (XSS) issue in that plugin/version. The CVE entry identifies the affected software, with a medium overall risk (CVSS 3.1 base score 6.5) from Patchstack data, noting ne...
CVE-2026-66428 WordPress WP Google Review Slider plugin <= 18.4 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...
CVE-2026-66433 WordPress Location Weather plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Location Weather = 3.0.6 versions...
EUVD-2026-49241
Unauthenticated Cross Site Request Forgery CSRF in WP Google Review Slider = 18.4 versions...
EUVD-2026-49240
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...
CVE-2026-66427 WordPress WP Google Review Slider plugin <= 18.4 - SQL Injection vulnerability
Administrator SQL Injection in WP Google Review Slider = 18.4 versions...