278193 matches found
CVE-2026-28142
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
CVE-2026-28148
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28148
CVE-2026-28148 affects the WordPress Headless Single Sign On plugin (versions 1.6 and earlier). The vulnerability is an unauthenticated bypass that could allow an attacker to bypass authentication, with CVSS 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base score 9.8, CRITICAL). Connected records do ...
CVE-2026-28142 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability
Unauthenticated SQL Injection in Web Directory Free = 1.7.13 versions...
EUVD-2026-57944
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28008
CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...
CVE-2026-28008 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28004
WordPress Business Directory plugin
CVE-2026-28004 WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...
CVE-2026-28004
Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...
CVE-2026-28003
The CVE-2026-28003 entry describes an unauthenticated Cross Site Scripting (XSS) vulnerability in WordPress Maspik – Spam blacklist plugin, affecting versions up to 2.9.1. The issue is documented with CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, no privileges required, user interact...
EUVD-2026-57943
Unauthenticated Cross Site Scripting XSS in Business Directory = 6.4.25 versions...
CVE-2026-28003
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
EUVD-2026-57942
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
CVE-2026-28003 WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Maspik – Spam blacklist = 2.9.1 versions...
CVE-2026-27999
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
CVE-2026-27999
The CVE-2026-27999 entry concerns the WordPress Tourfic plugin, affected in versions up to 2.23.1, with a Broken Access Control vulnerability affecting subscribers. The connected sources explicitly identify the vulnerability type and affected versions but do not provide technical details on the r...