278368 matches found
CVE-2026-65569 WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65565 WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...
CVE-2026-65565
CVE-2026-65565 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Survey Maker plugin up to version 5.2.3.3. The initial data provides CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW impact on confidentiality/integrity/availability, and user inte...
CVE-2026-65559 WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
CVE-2026-65560
The vulnerability CVE-2026-65560 is an Unauthenticated XSS in the WordPress Houzez Property Feed plugin, affected versions
CVE-2026-65560 WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...
CVE-2026-65559
The CVE relates to a privilege-escalation issue in the WordPress plugin Order Delivery Date for WooCommerce, affecting versions up to 4.6.0. The vulnerability targets the shop manager role within the plugin’s delivery date functionality. The provided data constrain the impact to a privilege escal...
CVE-2026-65556
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65556
The CVE concerns the WordPress WPBruiser plugin (no-Captcha anti-Spam) up to version 3.1.43, with an unauthenticated PHP Object Injection vulnerability. Affected component: WPBruiser (WordPress plugin); vulnerable condition: unauthenticated PHP object injection in versions
CVE-2026-65556 WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
EUVD-2026-53981
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-65554
The CVE-2026-65554 entry concerns the WordPress AnsPress – Question and Answer plugin version 4.4.4, with a Broken Access Control vulnerability affecting subscribers. The available connected sources confirm the affected software and the underlying issue as access control in the plugin’s subscribe...
CVE-2026-65553
Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (
CVE-2026-65554 WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65552
CVE-2026-65552 concerns the WordPress Export User Data plugin (versions
CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...
CVE-2026-65548 WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...