24331 matches found
CVE-2026-93621
Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...
CVE-2026-93770
Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.13 versions...
CVE-2026-62085
Administrator SQL Injection in WP Activity Log = 5.6.6 versions...
CVE-2026-102386
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Schema & Structured Data for WP & AMP versions = 1.66...
CVE-2026-102386 WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
EUVD-2026-89942
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386
The WP Photo Album Plus WordPress plugin, version 9.3.02.003 and below, contains a Subscriber Cross Site Scripting (XSS) vulnerability. While the specific root cause and internal component are not detailed in the provided documents, the vulnerability allows for XSS impacts. No exploit details or ...
EUVD-2026-89878
Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...
CVE-2026-96825
The All In One WP Security & Firewall WordPress plugin, in versions
CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...
CVE-2026-96825 WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Subscriber Bypass Vulnerability in All In One WP Security & Firewall = 5.4.8 versions...
CVE-2026-96818 WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
EUVD-2026-89871
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
CVE-2026-96818 WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Express Checkout Accept PayPal Payments = 2.4.9 versions...
CVE-2026-96818
The WP Express Checkout (Accept PayPal Payments) plugin for WordPress is affected by an unauthenticated Broken Access Control vulnerability in versions
EUVD-2026-89859
Author SQL Injection in WP ERP = 1.17.9 versions...
CVE-2026-96346 WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
Author SQL Injection in WP ERP = 1.17.9 versions...