24672 matches found
CVE-2026-73343
WP Compress is a WordPress image optimization plugin. An unauthenticated Remote Code Execution (RCE) vulnerability affects versions prior to 7.20.01 , allowing a remote attacker with no prior access to execute arbitrary code on the host, resulting in full compromise of confidentiality, integrity,...
CVE-2026-73343 WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-73343 WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
EUVD-2026-60774
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-73343
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
CVE-2026-73342 WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
EUVD-2026-60772
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-73342 WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-73342
The WordPress WP Multilang plugin (versions 2.4.31 and earlier) contains an unauthenticated stored/reflected XSS flaw exploitable via network access with no privileges, scoring CVSS 7.1 (HIGH); exploitation requires user interaction and impacts confidentiality, integrity, and availability at low ...
CVE-2026-73342
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
CVE-2026-73189
...
CVE-2026-73189
Subscriber Insecure Direct Object References IDOR in WP Crowdfunding 2.2.1 versions...
CVE-2026-73189
The WP Crowdfunding WordPress plugin (versions
EUVD-2026-60939
Subscriber Insecure Direct Object References IDOR in WP Crowdfunding 2.2.1 versions...
EUVD-2026-60930
Contributor Cross Site Scripting XSS in WP Tab Widget = 1.2.11 versions...
CVE-2026-66646 WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in WP Tab Widget = 1.2.11 versions...
CVE-2026-66646
The WordPress plugin WP Tab Widget (versions ≤ 1.2.11) contains a contributor-level stored XSS vulnerability: untrusted input is output without sanitization, allowing a contributor to inject scripts that execute in visitors' browsers. CVSS 3.1 scores 6.5 (Medium). CISA SSVC reports no known explo...