278016 matches found
CVE-2026-28170
CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions
EUVD-2026-57955
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...
CVE-2026-28168
CVE-2026-28168 affects the WordPress CubeWP plugin up to version 1.1.30. The issue is described as a Subscriber SQL Injection vulnerability, with CVSS 3.1 base score 8.5 (HIGH ) and a Network attack vector, Low attack complexity, privileges required, no user interaction, and scope Changed with Co...
CVE-2026-28168 WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28168
Subscriber SQL Injection in CubeWP = 1.1.30 versions...
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28161
CVE-2026-28161 affects the WordPress Service Finder Booking plugin
EUVD-2026-57953
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159
CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...
CVE-2026-28158
CVE-2026-28158 concerns unauthenticated XSS in the WordPress Do Lasso plugin versions
CVE-2026-28157
CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions
CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28156 WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28156
CVE-2026-28156 pertains to the WordPress Do Lasso plugin
CVE-2026-28155
CVE-2026-28155 corresponds to an unauthenticated Insecure Direct Object References (IDOR) vulnerability in the WordPress Do Lasso plugin, affecting versions up to 358. The CVSS 3.1 base metrics indicate Network attack vector, Low attack complexity, No privileges required, with Confidentiality imp...