CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61978

The CVE concerns a WordPress plugin: Secure Card Gateway for ePay Paycenter (Piraeus Bank), affected versions up to 1.0.32. The issue is Unauthenticated Broken Access Control, implying that unauthenticated attackers could access or manipulate restricted functionality within the plugin. No root ca...

EUVD-2026-57976

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61978 WordPress Secure Card Gateway for ePay Paycenter (Piraeus Bank) plugin <= 1.0.32 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter Piraeus Bank = 1.0.32 versions...

CVE-2026-61979

CVE-2026-61979 affects the WordPress SAML SP Single Sign On plugin (≤ 5.4.3). It enables unauthenticated privilege escalation, per the NVD/CVE records and CVE listings. The provided documents do not specify the exact exploit vector, affected versions beyond ≤ 5.4.3, or remediation steps (e.g., pa...

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61974 WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Mang Board WP = 2.3.4 versions...

CVE-2026-61969

Unauthenticated SQL Injection in Listdom = 5.6.0 versions...

CVE-2026-61969 WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Listdom = 5.6.0 versions...

CVE-2026-61969

CVE-2026-61969 concerns an unauthenticated SQL injection in the WordPress Listdom plugin. Affected: Listdom ≤ 5.6.0. Root cause: likely improper handling of input in a database query, enabling SQL injection without authentication. Impact (per CVSS): high confidentiality impact, low availability i...

CVE-2026-61967

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

EUVD-2026-57972

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

CVE-2026-61967

CVE-2026-61967 concerns an unauthenticated privilege-escalation vulnerability in the WordPress plugin miniorange OTP Verification (versions

CVE-2026-61967 WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in miniorange otp verification = 5.5.1 versions...

EUVD-2026-57970

Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...

CVE-2026-61966 WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

CVE-2026-61965

Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...

CVE-2026-61966

Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...

CVE-2026-61965 WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...

CVE-2026-61966

CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...