277204 matches found
CVE-2026-28176 WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
CVE-2026-28175
The connected documents confirm a vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics, affected versions
CVE-2026-28175
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
CVE-2026-28175 WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
EUVD-2026-57958
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28174
Technical details, affected components, exploit vectors, and remediation are not publicly provided in the supplied documents; monitor for updates.
CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...
EUVD-2026-57956
Customer Arbitrary Content Deletion in WP Event SOlution = 4.1.19 versions...
CVE-2026-28170
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28170
CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions
CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
EUVD-2026-57955
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28168 WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28168
CVE-2026-28168 affects the WordPress CubeWP plugin up to version 1.1.30. The issue is described as a Subscriber SQL Injection vulnerability, with CVSS 3.1 base score 8.5 (HIGH ) and a Network attack vector, Low attack complexity, privileges required, no user interaction, and scope Changed with Co...
CVE-2026-28168
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...