278367 matches found
CVE-2026-66452 WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei = 1.0.13 versions...
CVE-2026-66451
CVE-2026-66451 affects the WordPress plugin WP Event Solution (
CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
EUVD-2026-53884
Unauthenticated Broken Authentication in WP Event SOlution = 4.1.9 versions...
CVE-2026-66447 WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
EUVD-2026-53883
Unauthenticated SQL Injection in WordPress File Upload = 5.1.7 versions...
CVE-2026-66447
CVE-2026-66447 : Unauthenticated SQL Injection in WordPress File Upload plugin
CVE-2026-66439 WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...
CVE-2026-66440 WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WPIDE – File Manager & Code Editor = 3.5.7 versions...
CVE-2026-66440
The CVE-2026-66440 entry documents an Unauthenticated Cross-Site Scripting (XSS) vulnerability in the WPIDE – File Manager & Code Editor WordPress plugin up to version 3.5.7. Affected component is the plugin’s WPIDE File Manager/Code Editor functionality; the flaw is an XSS issue exploitable with...
CVE-2026-66439
CVE-2026-66439 concerns the WordPress plugin Advanced AJAX Product Filters with versions up to 3.2.0.3, where an unauthenticated cross-site scripting (XSS) vulnerability exists. The connected sources consistently describe an XSS flaw in this plugin version range, but do not provide concrete detai...
CVE-2026-66425 WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-66425 WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin <= 1.9.0 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-66425
Technical details are not publicly available in the provided documents. Monitor for updates from the listed sources.
CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65581
The CVE-�2026-65581 entry concerns the WordPress AI ANN theme (<= 1.29.0) and describes an unauthenticated PHP Object Injection vulnerability. The connected documents corroborate the affected product and version range, with a focus on PHP object injection as the underlying issue. There are no ...
CVE-2026-65579 WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CVE-2026-65578
The CVE-2026-65578 entry describes an unauthenticated PHP Object Injection in the WordPress Agora theme versions up to 1.9. The vulnerability affects the Agora WordPress theme (≤ 1.9) and arises from a PHP object injection flaw, leading to potentially full system compromise without authentication...
CVE-2026-65579
CVE-2026-65579 describes an unauthenticated PHP Object Injection in the WordPress Agricola theme up to version 1.21.0. The affected component is the Agricola WordPress theme; the root cause is a PHP object injection vulnerability, enabling an attacker to achieve total compromise without authentic...