277087 matches found
CVE-2026-73357
CVE-2026-73357 is a Donor Cross Site Scripting (XSS) in the WordPress GiveWP plugin, affecting versions before 4.16.6. The CVSS v3.1 base score is 6.5 (MEDIUM). Patch: upgrade to 4.16.6 or newer. Connected sources confirm GiveWP
EUVD-2026-57914
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73357 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
Donor Cross Site Scripting XSS in GiveWP 4.16.6 versions...
CVE-2026-73353 WordPress Revolut Gateway for WooCommerce plugin < 4.22.10 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...
CVE-2026-73349 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
CVE-2026-73349
CVE-2026-73349 applies to the WordPress GiveWP plugin, pre-4.16.6. It is an unauthenticated broken access control vulnerability reported for GiveWP before version 4.16.6. The provided CVSSv3.1 metrics indicate network access, low attack complexity, no privileges required, with no confidentiality ...
CVE-2026-73353
CVE-2026-73353 — WordPress plugin Revolut Gateway for WooCommerce, versions
CVE-2026-73346 WordPress MailChimp For WooCommerce plugin < 6.2 - SQL Injection vulnerability
Administrator SQL Injection in MailChimp For WooCommerce 6.2 versions...
CVE-2026-73346
The CVE concerns the WordPress plugin MailChimp For WooCommerce (affected: versions
CVE-2026-73344
The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions
CVE-2026-73344 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-73340 WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Featured Image from URL = 5.3.3 versions...
CVE-2026-73340
The CVE covers a Cross Site Scripting (XSS) vulnerability in the WordPress plugin Featured Image from URL , affecting versions
CVE-2026-73188
CVE-2026-73188 concerns unauthenticated sensitive data exposure in the WordPress KiviCare plugin, versions
CVE-2026-66704 WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery SSRF in Gutenverse Companion = 2.5.1 versions...
CVE-2026-66700
CVE-2026-66700 affects the WordPress plugin “Smart Online Order for Clover” (versions <= 1.6.1). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) flaw reported for that plugin, indicating an attacker can inject scripts without authentication. Connected records confirm the aff...
CVE-2026-66700 WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Smart Online Order for Clover = 1.6.1 versions...