277204 matches found
CVE-2026-59549
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
EUVD-2026-49218
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59549 WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.10 - SQL Injection vulnerability
Unauthenticated SQL Injection in rtMedia for WordPress, BuddyPress and bbPress = 4.7.10 versions...
CVE-2026-59550
CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions
CVE-2026-59548 WordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Byteflows Travel & Hotel Booking = 1.0.0 versions...
CVE-2026-59548
The CVE concerns WordPress Byteflows Travel & Hotel Booking plugin, version
CVE-2026-59539
CVE-2026-59539 affects the WordPress plugin Paid Member Subscriptions (versions
CVE-2026-59546 WordPress Hide My WP Ghost plugin <= 7.0.06 - 2FA Bypass vulnerability
Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...
CVE-2026-59546
Subscriber Broken Authentication in Hide My WP Ghost = 7.0.06 versions...
CVE-2026-59546
CVE-2026-59546 concerns the WordPress plugin Hide My WP Ghost (versions
CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...
CVE-2026-59539 WordPress Paid Member Subscriptions plugin <= 3.0.7 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Paid Member Subscriptions = 3.0.7 versions...
CVE-2026-59538 WordPress GamiPress plugin <= 7.9.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...
EUVD-2026-49214
Unauthenticated SQL Injection in GamiPress = 7.9.7 versions...
CVE-2026-59538
CVE-2026-59538 affects the WordPress GamiPress plugin up to version 7.9.7, with an unauthenticated SQL Injection vulnerability. The issue is triggered by unauthenticated access and is exploitable over the network with low complexity and no user interaction. CVSS 3.1 metrics indicate a CRITICAL ba...
CVE-2026-59537
The CVE concerns the WordPress plugin Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce (
CVE-2026-59537 WordPress Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce plugin <= 2.10.22 - SQL Injection vulnerability
Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce = 2.10.22 versions...
CVE-2026-59536 WordPress CoCart – Headless ecommerce plugin <= 4.8.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in CoCart – Headless ecommerce = 4.8.4 versions...