CVE-2026-84762

CVE-2026-84762 affects the WP EasyPay WordPress plugin in versions 4.5.3 and earlier . The vulnerability is an unauthenticated bypass that allows a remote attacker with no privileges and no user interaction to achieve low integrity impact , scoring CVSS 5.3 (Medium) . The specific component or ro...

EUVD-2026-70582

Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...

CVE-2026-84762 WordPress WP EasyPay plugin <= 4.5.3 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...

EUVD-2026-70585

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757

CVE-2026-84757 affects the WordPress WP Compress plugin in versions 7.21.28 and earlier . The vulnerability is an unauthenticated Settings Change , meaning an attacker with no prior access can modify plugin settings over the network without any user interaction. This yields a CVSS 3.1 base score ...

CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

EUVD-2026-70592

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

CVE-2026-81776 WordPress WP QuickLaTeX plugin <= 3.8.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

CVE-2026-81776

CVE-2026-81776 affects the WordPress WP QuickLaTeX plugin in versions

PT-2026-85100

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

CVE-2026-84757: Missing Authorization

Unauthenticated Settings Change in WP Compress = 7.21.28 versions...

PT-2026-85092

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

CVE-2026-84774: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...

CVE-2026-84762: External Control of Assumed-Immutable Web Parameter

Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...

PT-2026-85103

Unauthenticated Bypass Vulnerability in WP EasyPay = 4.5.3 versions...

PT-2026-85111

Unauthenticated Cross Site Scripting XSS in WP Statistics = 14.16.11 versions...

CVE-2026-81776: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

CVE-2026-83533

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...