277079 matches found
CVE-2026-65443 WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in BackWPup = 5.7.4 versions...
CVE-2026-65445 WordPress Ad Invalid Click Protector (AICP) plugin <= 1.3.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Ad Invalid Click Protector AICP = 1.3.0 versions...
CVE-2026-65443
CVE-2026-65443 corresponds to an unauthenticated Cross Site Scripting (XSS) vulnerability in the BackWPup WordPress plugin, affecting versions up to 5.7.4. The NVD entry and related records confirm the issue and CVSS v3.1 base score of 7.1 (HIGH) with network attack vector, low attack complexity,...
CVE-2026-65442 WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...
CVE-2026-65442
CVE-2026-65442 is an unauthenticated Server-Side Request Forgery (SSRF) in the WordPress FormCraft plugin (versions ≤ 3.9.15). The root cause is missing nonce verification and authentication checks on the formcraft3_get AJAX endpoint, allowing an unauthenticated attacker to force the server to is...
CVE-2026-65440
GetGenie WordPress plugin
CVE-2026-65441
CVE-2026-65441 affects WordPress plugin GiveWP up to version 4.16.3, with an Unauthenticated Cross-Site Scripting (XSS) vulnerability. Descriptions in connected documents indicate the issue is present in GiveWP
CVE-2026-65440 WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GetGenie = 4.4.3 versions...
CVE-2026-65441 WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GiveWP = 4.16.3 versions...
CVE-2026-65439 WordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Ultimate Addons for Contact Form 7 =3.5.45 versions...
CVE-2026-65439
The CVE-2026-65439 entry describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Ultimate Addons for Contact Form 7” affecting versions
CVE-2026-65438
CVE-2026-65438 affects the WordPress plugin “Message Filter for Contact Form 7” (versions up to 1.6.3.9). The issue is an unauthenticated Cross-Site Scripting (XSS) vulnerability in the plugin’s message filtering functionality. No root cause details are provided beyond the XSS description in the ...
CVE-2026-65438 WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Message Filter for Contact Form 7 = 1.6.3.9 versions...
CVE-2026-65437 WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 6.82 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Spam protection, AntiSpam, FireWall by CleanTalk = 6.82 versions...
CVE-2026-65437
CVE-2026-65437 describes an unauthenticated XSS in the WordPress plugin Spam protection, AntiSpam, FireWall by CleanTalk, affected through versions <= 6.82. The issue impacts users via cross-site scripting without authentication; CVSS 3.1 base score 7.1 (HIGH) with network attack vector, low i...
CVE-2026-61953 WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in Simple Link Directory Pro = 15.0.6 versions...
CVE-2026-61957
CVE-2026-61957 affects the WordPress plugin Miniorange OTP Verification (versions
CVE-2026-61957 WordPress miniorange otp verification plugin <= 5.5.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...