24493 matches found
WordPress Quentn WP plugin 1.2.13-1.2.14 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Yaswanth Reddy Sunkara in WordPress Plugin Quentn WP versions 1.2.13-1.2.14...
WordPress WP Business Intelligence Lite plugin <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation vulnerability
Authenticated Subscriber+ Missing Authorization to Privilege Escalation vulnerability discovered by Nabil Irawan in WordPress Plugin Business Intelligence Lite versions = 3.2.0...
CVE-2026-18386
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-18386 WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-18386
The WP BackItUp Community Edition WordPress plugin (all versions up to and including 2.1.0 ) is vulnerable to directory traversal via the backup_file parameter in its download handler. The root cause is that the basename() normalization only executes when the traversed target path does not exist,...
PT-2026-89450
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
PT-2026-89429
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
PT-2026-89441
Name of the Vulnerable Software and Affected Versions WP Travel versions prior to 12.0.4 Description An authentication bypass issue exists via an alternate path or channel, which allows for password recovery exploitation. Recommendations Update to version 12.0.4 or later...
CVE-2026-81801: Missing Authorization
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-81782: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP Docs = 2.3.1 versions...
CVE-2026-84821: Missing Authorization
Unauthenticated Broken Access Control in WP Fast Total Search = 1.82.284 versions...
CVE-2026-81796: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3...
PT-2026-89444
Subscriber Settings Change in WP-Stateless = 4.4.1 versions...
CVE-2026-18386: Improper Limitation of a Pathname to a Restricted Directory
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-15823: Missing Authorization
The Builderall Cheetah For Wp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable function in versions up to, and including, 3.0.2. The wpajaxbacheetahdisable AJAX handler is registered without any capability or nonce...
Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache
CVE-2023-6063 — WP Fastest Cache SQL Injection PoC !Python...
WordPress WP BackItUp Community Edition plugin <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability
Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Nikola Kojic in WordPress Plugin WP BackItUp versions = 2.1.0...
WordPress WP Grid Builder plugin <= 2.3.3 - Authenticated (Subscriber+) Privilege Escalation vulnerability
Authenticated Subscriber+ Privilege Escalation vulnerability discovered by h0xilo in WordPress Plugin WP Grid Builder versions = 2.3.3...
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by William Honnér in WordPress Plugin WP Fast Total Search versions = 1.82.284...