277202 matches found
CVE-2026-61965
Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...
CVE-2026-61966
Subscriber SQL Injection in WPJAM Basic = 7.0.1 versions...
CVE-2026-61965 WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in GeekyBot = 1.2.6 versions...
CVE-2026-61966
CVE-2026-61966 : Affected software is the WordPress WPJAM Basic plugin in versions ≤ 7.0.1. The vulnerability is a Subscriber SQL Injection in WPJAM Basic, with the underlying issue described across connected sources. The CVSS 3.1 base score is 9.3 (CRITICAL), with network attack vector, low atta...
CVE-2026-61965
CVE-2026-61965 describes an unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress GeekyBot plugin, affecting versions
CVE-2026-61962
WP BASE Booking (WordPress plugin) versions
CVE-2026-61962 WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61962
Unauthenticated Arbitrary Code Execution in WP BASE Booking = 6.3.0 versions...
CVE-2026-61960
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-61960
WP Full Stripe Free plugin <= 8.5.0 contains an unauthenticated Cross Site Scripting (XSS) vulnerability. Affected software: WordPress WP Full Stripe Free (versions
CVE-2026-28189
The CVE-2026-28189 entry concerns the WordPress Participants Database plugin version <= 2.7.8.4, which is affected by an unauthenticated Arbitrary File Deletion vulnerability. The available records indicate the issue arises in this plugin series and can be triggered without authentication, wit...
CVE-2026-28189
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
CVE-2026-28189 WordPress Participants Database plugin <= 2.7.8.4 - Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
EUVD-2026-57967
Unauthenticated Arbitrary File Deletion in Participants Database = 2.7.8.4 versions...
CVE-2026-61960 WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Full Stripe Free = 8.5.0 versions...
CVE-2026-28188 WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...
CVE-2026-28188
Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...
EUVD-2026-57966
Unauthenticated Broken Access Control in Hydra Booking = 1.2.2 versions...