278527 matches found
CVE-2026-65559 WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce = 4.6.0 versions...
CVE-2026-65560
The vulnerability CVE-2026-65560 is an Unauthenticated XSS in the WordPress Houzez Property Feed plugin, affected versions
CVE-2026-65559
The CVE relates to a privilege-escalation issue in the WordPress plugin Order Delivery Date for WooCommerce, affecting versions up to 4.6.0. The vulnerability targets the shop manager role within the plugin’s delivery date functionality. The provided data constrain the impact to a privilege escal...
CVE-2026-65560 WordPress Houzez Property Feed plugin <= 2.5.48 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...
CVE-2026-65556
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65556
The CVE concerns the WordPress WPBruiser plugin (no-Captcha anti-Spam) up to version 3.1.43, with an unauthenticated PHP Object Injection vulnerability. Affected component: WPBruiser (WordPress plugin); vulnerable condition: unauthenticated PHP object injection in versions
CVE-2026-65556 WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WPBruiser no- Captcha anti-Spam = 3.1.43 versions...
CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
EUVD-2026-53981
Unauthenticated Remote Code Execution RCE in Spider Analyser WordPress搜索引擎蜘蛛分析插件 = 2.1.3 versions...
CVE-2026-65554
The CVE-2026-65554 entry concerns the WordPress AnsPress – Question and Answer plugin version 4.4.4, with a Broken Access Control vulnerability affecting subscribers. The available connected sources confirm the affected software and the underlying issue as access control in the plugin’s subscribe...
CVE-2026-65553
Unauthenticated Remote Code Execution in WordPress Spider Analyser plugin (
CVE-2026-65554 WordPress AnsPress – Question and answer plugin 4.4.4 - Broken Access Control vulnerability
Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions...
CVE-2026-65552
CVE-2026-65552 concerns the WordPress Export User Data plugin (versions
CVE-2026-65552 WordPress Export User Data plugin <= 2.2.6 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Export User Data = 2.2.6 versions...
CVE-2026-65548 WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution RCE in Betheme = 28.4.2 versions...
CVE-2026-65549
Summary: CVE-2026-65549 concerns the WordPress plugin Jeg Kit for Elementor, affected
CVE-2026-65548
The connected sources confirm a Remote Code Execution (RCE) vulnerability affecting WordPress Betheme theme versions
CVE-2026-65549 WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
Author PHP Object Injection in Jeg Kit for Elementor = 3.2.10 versions...
CVE-2026-65547
CVE-2026-65547 is a SQL injection vulnerability in the WordPress Creative Mail plugin, affecting versions ≤ 1.6.9. The issue targets subscriber handling and is documented across multiple sources (NVD/CVELIST, patchstack, EUVD). No exploitation status or in-the-wild details are provided in the con...