278193 matches found
EUVD-2026-57941
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27999 WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Tourfic = 2.23.1 versions...
CVE-2026-27544 WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
CVE-2026-27544
CVE-2026-27544 affects the WordPress QA Analytics plugin (versions ≤ 5.2.0.0). It enables unauthenticated Remote Code Execution via a flaw described in multiple sources. The provided documents do not specify the root cause, affected component details beyond the plugin/version, or a confirmed reme...
EUVD-2026-57938
Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...
CVE-2026-27543
CVE-2026-27543 relates to the WordPress plugin “MStore API” (WordPress MStore API plugin) and is described as an unauthenticated privilege escalation affecting versions
CVE-2026-27543
Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...
CVE-2026-27539 WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...
CVE-2026-27543 WordPress MStore API plugin <= 4.20.0 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...
CVE-2026-27539
CVE-2026-27539 describes an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress Welcart e-Commerce plugin, versions
EUVD-2026-57937
Unauthenticated Cross Site Scripting XSS in Welcart e-Commerce = 2.11.31 versions...
CVE-2026-27538 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27537
CVE-2026-27537 affects the WordPress plugin Popup by Supsystic (versions ≤ 1.11.2). The vulnerability is an Unauthenticated Cross Site Scripting (XSS) vulnerability. The CVSS v3.1 base score is 6.5 (MEDIUM) with AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. The description indicates no authenticated acces...
CVE-2026-27538
CVE-2026-27538 affects the WordPress WP Directory Kit plugin up to version 1.5.4, with an unauthenticated SQL injection vulnerability. The underlying root cause, affected files/components, and exact exploitation flow are not detailed in the provided documents. CVSS 3.1 base score is 7.5 (HIGH) wi...
EUVD-2026-57935
Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...
CVE-2026-27537 WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Popup by Supsystic = 1.11.2 versions...
CVE-2026-27536
The CVE-2026-27536 details an unauthenticated Cross-Site Scripting (XSS) vulnerability in the WordPress MailChimp Subscribe Forms plugin, versions
CVE-2026-27380
CVE-2026-27380 affects the WordPress Car Rental Manager plugin