377923 matches found
CVE-2026-16144
The CVE-2026-16144 entry concerns Kali Forms ≤ 2.4.20 (WordPress plugin) with unauthenticated Remote Code Execution via the _save_data function. The root cause is insufficient validation of the _save_data() path when a form field value can overwrite a trusted placeholder, allowing attacker-contro...
CVE-2026-11995
The Gutena Forms plugin for WordPress (up to version 1.9.0) is vulnerable to an authorization bypass in process_bulk_action(), allowing unauthenticated attackers to modify read/unread status or permanently trash arbitrary form submissions. The nonce from check_ajax_referer() does not act as an au...
CVE-2026-16614
The CVE-2026-16614 entry concerns the GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress, affected up to version 5.2.1. The root cause is insufficient escaping of the user-supplied and interpolated ‘s’ parameter in SQL queries, compounded by inadequate preparat...
CVE-2026-15018
CVE-2026-15018 concerns the WordPress plugin “Database Collation Fix” (
CVE-2026-16090
The CVE affects the WordPress plugin GamiPress (Gamification) up to version 7.9.9.1. It describes a Stored Cross-Site Scripting vulnerability via the heading_size attribute of the gamipress_achievement shortcode. The root cause is insufficient input sanitization and output escaping, with the payl...
CVE-2026-16685
The CVE-2026-16685 entry concerns the WordPress Download Manager plugin (
CVE-2026-18062
CVE-2026-18062 affects Kadence Blocks — Page Builder Toolkit for Gutenberg Editor for WordPress, version ≤ 3.7.8.1. The issue is a Stored Cross-Site Scripting vulnerability in the Identity Block Inner Image Content path caused by insufficient input sanitization and output escaping. Exploitation r...
CVE-2026-18435
Kadence Blocks (WordPress)
CVE-2026-15645
Powerkit
CVE-2026-15662
CVE-2026-15662 affects the WordPress plugin “Advanced Woo Labels – Product Labels & Badges for WooCommerce” up to version 2.48. The vulnerability is a Stored Cross-Site Scripting via the bg_color parameter, caused by insufficient input sanitization and output escaping. An attacker with contributo...
CVE-2026-15601
The CVE affects the Kirki plugin for WordPress (versions
CVE-2026-13458
The CVE affects GenerateBlocks for WordPress (versions
CVE-2026-16087
The CVE-2026-16087 entry concerns the Icegram Engage WordPress plugin (≤ 3.1.42). A second-order SQL Injection is possible via the messages[][id] parameter, arising from insufficient escaping and lack of $wpdb->prepare() in a SQL IN() clause. The malicious value is first saved to post meta by ...
CVE-2026-10782
CVE-2026-10782 affects the RealHomes Memberships plugin for WordPress. All versions up to and including 3.0.9 are vulnerable to an authorization bypass in the ims_add_paypal_recurring_membership AJAX action, due to improper verification of user permissions. This allows authenticated users with su...
CVE-2026-16684
Easy Property Listings for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook' User Contact Method in all versions up to 3.5.24. Root cause: insufficient input sanitization and output escaping. Enabled attackers with subscriber-level access or higher to inject scripts execut...
CVE-2026-2916
The Jeg Kit for Elementor WordPress plugin (up to v3.1.1) is vulnerable to Sensitive Information Exposure via enqueue_scripts() in class-dashboard.php. The plugin injects a JkitDashboardOption inline script containing: (1) full plugin inventory (names, versions, paths, active status), (2) system ...
CVE-2026-15988
The CVE refers to the WordPress plugin “AI Engine – The Chatbot, AI Framework & MCP for WordPress.” All versions up to and including 3.6.5 are affected by a CSRF vulnerability due to missing or incorrect nonce validation in reauth_for_authorize. This enables unauthenticated attackers to create ne...
CVE-2025-14469
The Theme Editor WordPress plugin (up to v3.1) is affected by a Cross-Site Request Forgery due to missing nonce validation on the ms_update AJAX action. This allows unauthenticated attackers to modify child theme CSS styles via a forged request if an administrator is tricked into performing an ac...
CVE-2026-14839
The vulnerability affects the Mapster WP Maps WordPress plugin prior to version 1.24.0. The root cause is lack of authorization and post-status checks on a public REST endpoint, allowing unauthenticated users to retrieve the title and full content of any post, including unpublished items (draft, ...
CVE-2026-14840
CVE-2026-14840 concerns the YOP Poll WordPress plugin (before 7.0.6). The vulnerability arises because the plugin does not validate the connection’s origin IP and trusts client-controlled forwarding headers when enforcing per-IP vote limits, enabling unauthenticated attackers to bypass the vote r...
CVE-2026-14292
The CVE concerns the WordPress plugin Download Manager prior to version 3.3.66. The vulnerability arises because the package title is not properly escaped before being output in front-end templates, enabling stored cross-site scripting (XSS) by users with the Author role or higher. This can lead ...
CVE-2026-14561
The Authora WordPress plugin (before version 1.7.7) fails to keep its one‑time login code confidential, exposing both the code and a valid verification token in the response of an unauthenticated action. This enables unauthenticated attackers to log in as any user whose registered mobile number i...
CVE-2026-14214
The Booking for Appointments and Events Calendar WordPress plugin is vulnerable before version 2.4.4: the customer import does not restrict which fields can be written, enabling a user with the Amelia Manager role to modify arbitrary columns of any stored user record via the import request. This ...
CVE-2026-14315
The Pixel Tag Manager for WooCommerce WordPress plugin is vulnerable in versions before 2.2.1: an AJAX action lacks authorization, letting unauthenticated users forge e‑commerce conversion events via the site’s configured server‑side advertising conversion APIs using stored credentials. Impact is...
CVE-2026-14822
CVE-2026-14822 affects the WordPress plugin “Event Tickets and Registration” (before 5.29.0.1). The vulnerability is an missing authorization check on an order-management REST endpoint, allowing unauthenticated users to alter the status of existing orders. The underlying root cause is lack of acc...
CVE-2026-14823
The Event Tickets and Registration WordPress plugin is affected by CVE-2026-14823: prior to version 5.29.0.1, it does not properly verify authorization on certain seating actions, allowing users with contributor-level access and above to overwrite the seating layout, ticket inventory, and attende...
CVE-2026-13725
The vulnerability CVE-2026-13725 affects the Dynamic Pricing With Discount Rules for WooCommerce WordPress plugin prior to 5.0.0. The issue arises because a nonce and user capability validation is not performed on one AJAX action, and the response reflects unsanitised user input, enabling unauthe...
CVE-2026-14195
The CVE concerns the Brizy WordPress plugin (before 2.8.18) where a request handler fails to verify authorization, enabling users with Contributor role or higher to read arbitrary post content, including other users’ private, pending, and draft posts. Affected component: Brizy WordPress plugin, v...
CVE-2026-13604
CVE-2026-13604 affects the Pixelavo WordPress plugin (pre-1.5.4). The vulnerability is an unauthenticated AJAX action, gated only by a nonce emitted on every front-end page, that forwards client-supplied event data to the Facebook Conversions API using the administrator’s stored access token. Thi...
CVE-2026-13596
The CVE pertains to the WordPress plugin Participants Database, affected version prior to 2.7.8.4. The issue is improper sanitization/escaping of a user-supplied parameter used in an SQL query, enabling unauthenticated SQL injection. Impact is unauthenticated data access or manipulation via the v...
CVE-2026-13729
CVE-2026-13729 concerns the Podlove Podcast Publisher WordPress plugin, affected in versions before 4.5.3. The vulnerability arises because the plugin does not perform nonce validation on some administrative create and delete actions, enabling a forged request (CSRF). This can allow an attacker t...
CVE-2026-11882
The Builderall for WordPress plugin (pre-3.0.2) has an OAuth flaw where the state value from public OAuth routes is not bound to the initiating user session. This allows unauthenticated attackers to complete the OAuth connection flow and overwrite the stored third‑party integration access token. ...
CVE-2026-13157
The CVE-2026-13157 entry concerns the Demo Import WordPress plugin up to version 1.1.3, where file-type validation is bypassed during demo-content import. This allows high-privilege users (Administrator by default, including non-super-admins on multisite) to upload executable PHP files to the upl...
CVE-2026-12696
The vulnerability CVE-2026-12696 affects the wpForo Forum WordPress plugin prior to 3.1.2. The issue is a stored XSS flaw where a user profile field is output inside an HTML attribute without proper sanitization/escaping on the public participant profile page. This enables subscribers to inject J...
CVE-2026-13329
The Buckaroo Woocommerce Payments Plugin for WordPress is affected: versions before 4.9.0 do not perform any capability check or nonce validation on an AJAX action that processes payment capture refunds. This allows any authenticated user, including Subscribers, to trigger refunds against capture...
CVE-2026-10827
The CVE-2026-10827 affects the Spectra Legacy WordPress plugin prior to version 2.20.0. It does not validate or escape several block style attributes when generating the CSS for a block, enabling users with the Contributor role and above to inject arbitrary CSS into pages that render the affected...
CVE-2026-15262
The CVE concerns the WordPress plugin Admin Columns for ACF Fields, affected through version 0.3.2. The root cause is that Advanced Custom Fields values are not escaped before being output in the WordPress admin post-list table. This allows users with contributor-level access or higher to store a...
CVE-2026-15234
The CVE-2026-15234 entry concerns the Codeless Page Builder plugin for WordPress (versions up to 1.1.4). It reports that the plugin does not sanitize or validate a shortcode attribute before using it as an HTML tag name when rendering content, enabling stored XSS where users with contributor-leve...
CVE-2026-13158
The Everest Toolkit WordPress plugin (
CVE-2026-14836
The CVE concerns the WordPress plugin Login & Register Forms (vulnerable through version 3.2.4 and earlier) where the password-reset verification-code flow does not enforce the rate limit correctly. The issue stems from keying both the verification code and the per-source attempt counter on an un...
CVE-2026-15368
The CVE applies to the WordPress plugin User Profile Builder and is triggered by versions before 3.16.4 . The vulnerability is that the plugin does not correctly bind the automatic login after user registration to the newly created account, enabling an unauthenticated attacker to obtain an authen...
CVE-2026-15244
Affected product: HUSKY WordPress plugin (before v1.4.1). Vulnerability: directory traversal in a stored setting value prior to concatenation into a file inclusion path, enabling the inclusion and execution of arbitrary local files. Impact: vulnerable on every front-end request, including for una...
CVE-2026-14309
The CVE-2026-14309 entry pertains to the WordPress plugin Chat On Desk Order Notifications prior to version 1.0.9 . The vulnerability arises because the plugin does not verify that the one-time password (OTP) has been validated before processing a password-reset request, enabling unauthenticated ...
CVE-2026-14197
The CVE concerns the Fluent Support WordPress plugin prior to version 2.3.1, where the plugin does not perform a per-ticket access check before reassigning a ticket’s customer. This permits a restricted support agent to arbitrarily change the assigned customer of any ticket, including those beyon...
CVE-2026-14596
The CVE concerns the DynamicKit for Elementor WordPress plugin prior to version 1.0.3. The vulnerability is: the plugin does not validate the host of a user-supplied URL used as the base for password-reset links sent via email. This enables an unauthenticated attacker to cause a target user to re...
CVE-2026-12966
The CVE-2026-12966 issue affects the Direct Payments for WooCommerce WordPress plugin (pre-2.5.3). It allows unauthenticated attackers to tamper with other customers’ orders by abusing several unauthenticated AJAX handlers that do not verify ownership before changing order status and overwriting ...
CVE-2025-15669
The CVE-2025-15669 pertains to the Bit Form WordPress plugin, affected version
CVE-2026-15932
The CVE concerns the Support Genix WordPress plugin (before version 1.4.48). A directory traversal flaw in the ticket-attachment download route permits unauthenticated read access to arbitrary files with an allowlisted extension, including other users’ private ticket attachments, on the server. D...