24377 matches found
CVE-2026-15731
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731
The WP Multilang – Translation and Multilingual Plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 2.4.31 . The root cause is insufficient input sanitization and output escaping within the post content. This allows authenticated attackers with ...
EUVD-2026-85837
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731 WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-15731 WP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin WP Statistics versions = 14.16.13...
WordPress All In One WP Security & Firewall plugin <= 5.4.8 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin All In One WP Security & Firewall versions = 5.4.8...
WordPress WP OAuth Server ( Login with WordPress ) plugin < 6.4.0 - Subscriber+ Cross-User Account Takeover vulnerability
Subscriber+ Cross-User Account Takeover vulnerability discovered by vuxvinh in WordPress Plugin WP OAuth Server versions 6.4.0...
PT-2026-97646
Name of the Vulnerable Software and Affected Versions Paytium: Mollie payment forms & donations plugin for WordPress versions prior to 5.0.4 Description A privilege escalation issue exists where unauthenticated attackers can register a new WordPress account with administrator privileges. The flaw...
PT-2026-97734
Name of the Vulnerable Software and Affected Versions YOP Poll versions prior to 7.0.11 Description The plugin contains an origin validation error where it transmits a wp rest nonce to window.opener using the postMessage function with a wildcard targetOrigin. This allows unauthenticated attackers...
PT-2026-97775
Name of the Vulnerable Software and Affected Versions WP Multilang – Translation and Multilingual Plugin versions prior to 2.4.32 Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site...
CVE-2026-15731: Improper Neutralization of Input During Web Page Generation
The WP Multilang – Translation and Multilingual Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post content in all versions up to, and including, 2.4.31 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
WordPress WP Multilang – Translation and Multilingual Plugin plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777 in WordPress Plugin WP Multilang versions = 2.4.31...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-87900
An argument injection vulnerability exists in the WP Toolkit for cPanel version 6.11.2-10794 and earlier. This flaw allows a remote authenticated user to perform database modifications in other accounts, which can include reading arbitrary files and executing arbitrary code across customer accoun...
EUVD-2026-85619
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...
CVE-2026-87900
Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts...