24342 matches found
CVE-2026-97291
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
CVE-2026-97291
The Schema & Structured Data for WP & AMP plugin for WordPress, versions
CVE-2026-97291 WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
EUVD-2026-90218
Contributor PHP Object Injection in Schema & Structured Data for WP & AMP = 1.66 versions...
WordPress User Frontend plugin 2.5.8-4.3.11 - Unauthenticated Account Creation with Registration Disabled vulnerability
Unauthenticated Account Creation with Registration Disabled vulnerability discovered by Murad Akhmedov in WordPress Plugin WP User Frontend versions 2.5.8-4.3.11...
CVE-2026-96825
Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...
CVE-2026-96818
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
CVE-2026-96343
Custom role PHP Object Injection in WP ERP = 1.17.9 versions...
CVE-2026-96346
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-94681
Unauthenticated Denial of Service Attack in WP Store Locator 3.0.0 versions...
CVE-2026-93621
Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...
CVE-2026-93770
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...
CVE-2026-62085
Administrator SQL Injection in WP Activity Log = 5.6.6 versions...
CVE-2026-102386
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.66...
CVE-2026-102386 WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
EUVD-2026-89942
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386
The WP Photo Album Plus WordPress plugin, version 9.3.02.003 and below, contains a Subscriber Cross Site Scripting (XSS) vulnerability. While the specific root cause and internal component are not detailed in the provided documents, the vulnerability allows for XSS impacts. No exploit details or ...