CVE-2026-80440

Hustle is a WordPress plugin for lead generation and email marketing. Versions prior to 7.8.14.2 are affected by an unauthenticated arbitrary shortcode execution vulnerability. When a user submits a form, the plugin substitutes submitted values into a success message. The guard it applies to prev...

CVE-2025-7062

CVE-2025-7062 is a stored cross-site scripting (XSS) vulnerability in the H5P module h5p-nodejs-library by Lumi Education UG , affecting versions up to and including 10.0.4 . The library allows users to upload H5P content containing malicious JavaScript, which is then executed in the browsers of ...

CVE-2026-85133

The WPLP Cookie Consent WordPress plugin before 4.4.2 fails to perform nonce or capability checks on several settings AJAX actions. This allows any authenticated user with Subscriber-level access to read and destroy scan data belonging to the administrator and to overwrite the plugin's stored con...

CVE-2026-85418

The Orbit Fox WordPress plugin (versions before 3.0.9 ) contains a stored cross-site scripting (XSS) vulnerability in its Beaver Builder Pricing Table widget . A user-supplied HTML tag name is not validated before being echoed into rendered markup, allowing anyone with contributor-level access or...

CVE-2026-84222

CVE-2026-84222 affects the Kirki WordPress plugin versions 6.2.1 through 6.2.5 . The plugin fails to verify whether the requester is authorized to read a post before rendering and returning its content via the kirki_data parameter. This allows unauthenticated users to retrieve the content of non-...

CVE-2026-85132

WPLP Cookie Consent WordPress plugin versions 4.0.2 through 4.4.1 fail to perform nonce or capability checks on the gcc_get_schedule_scan AJAX action. This allows any authenticated user at subscriber level or above to read back the automated cookie scan schedule configured by the administrator. T...

CVE-2026-85037

The Sunshine Photo Cart WordPress plugin, prior to version 3.7 , fails to validate that a client-supplied price identifier belongs to the item being purchased when added to the cart. This Insecure Direct Object Reference (IDOR) flaw allows unauthenticated users to associate a lower price defined ...

CVE-2026-84113

CVE-2026-84113 affects the Quentn WP WordPress plugin in versions prior to 1.2.15 . The vulnerability stems from improper sanitization and escaping of the orderby and order parameters before they are used in an SQL query, enabling a SQL injection attack by users with high privileges (administrato...

CVE-2026-83541

The Sina Extension for Elementor WordPress plugin (versions 3.7.1 through 3.10.3) contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is a Table widget setting that is not properly escaped before being output within an HTML attribute. An attacker with the Contributor role o...

CVE-2026-82848

CVE-2026-82848 affects the Masteriyo LMS WordPress plugin, versions 1.3.1 through 2.3.3 (fixed in 3.4.0 ). The root cause is a missing authorization check on the plugin's REST API endpoint that returns course enrolment records. This allows unauthenticated users to enumerate sequential record iden...

CVE-2026-84068

The Quentn WP WordPress plugin versions 1.2.13 through 1.2.14 are vulnerable to unauthenticated SQL injection via the qntn_wp request parameter. The root cause is an inadequately escaped parameter used in an unprepared SQL query, allowing an attacker to extract arbitrary data from the database. T...

CVE-2026-82185

CVE-2026-82185 affects the WPLP Cookie Consent WordPress plugin prior to version 4.4.2 . The root cause is missing capability or nonce checks on some of the plugin's A/B testing actions , allowing any authenticated user with a low-privilege role (such as a subscriber ) to overwrite the cookie ban...

CVE-2026-81021

The SupportCandy WordPress plugin (versions 3.2.9 through 3.5.2) contains a missing authorization check on one of its support-ticket attachment download paths. This allows unauthenticated attackers to read protected customer-uploaded attachments by enumerating sequential attachment identifiers. T...

CVE-2026-81022

The SupportCandy WordPress plugin (versions 3.3.6 through 3.5.2 ) fails to validate a submitted per-ticket authorization code before disclosing the real code to the requester. This allows unauthenticated attackers over the network to read the contents of any support ticket by exploiting the autho...

CVE-2026-81741

The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin versions before 4.7.2 are vulnerable to an open redirect via its email preference confirmation flow. The redirect_to parameter is not restricted to the site's own host, allowing an unauthenticated attacker to redirect vi...

CVE-2026-82184

The WPLP Cookie Consent WordPress plugin prior to 4.4.2 is missing both authorization and CSRF checks when storing the IAB TCF consent option . Because this code executes on every front-end page load, an unauthenticated attacker can overwrite this site-wide option with arbitrary data. The CVSS 3....

CVE-2026-80339

The Payment Plugins for Stripe WooCommerce WordPress plugin before 4.0.12 fails to validate the order key before embedding order data in the front-end JavaScript configuration (via the order-pay endpoint). This allows unauthenticated users to enumerate sequential order identifiers and retrieve bi...

CVE-2026-80340

The Payment Plugins for PayPal WooCommerce WordPress plugin, versions before 2.0.26 , fails to validate the order key before embedding order data into the JavaScript configuration rendered on the front end. This allows unauthenticated users to recover the secret that gates access to a given order...

CVE-2026-80341

CVE-2026-80341 affects the Payment Plugins for PayPal WooCommerce WordPress plugin prior to version 2.0.26 . The plugin fails to verify that a stored payment method belongs to the user attaching it — an IDOR flaw — allowing any authenticated user (e.g., a subscriber) to bind another customer's st...

CVE-2026-18042

WP Travel WordPress plugin versions before 12.0.2 fail to verify that the requester is authorized to act on the booking targeted by its front-end payment-message handlers. This missing authorization check allows unauthenticated attackers to cancel the payment on any customer's booking, resulting ...

CVE-2026-75861

The Ultimate Gift Cards for WooCommerce WordPress plugin (versions before 3.2.10 ) fails to verify that the user redeeming a gift card is its intended recipient. This allows any authenticated user with subscriber-level access to redeem another user's gift card, zeroing the original owner's balanc...

CVE-2026-14962

CVE-2026-14962 affects the ELEX WooCommerce Request a Quote WordPress plugin in versions before 2.4.1 . The plugin fails to properly sanitise and escape the variation_id parameter before using it in a SQL query, enabling unauthenticated attackers to perform SQL injection and extract arbitrary dat...

CVE-2026-16960

The Loops & Logic WordPress plugin (versions before 4.3.0 ) exposes an unrestricted public template-data action , allowing unauthenticated users to read arbitrary user records—including email addresses and roles —as well as arbitrary site options. The root cause is a missing permission check on t...

CVE-2026-13146

WP Travel is a WordPress plugin that facilitates travel booking management. Versions before 12.0.2 contain an Insecure Direct Object Reference (IDOR) flaw in the bank-deposit slip submission endpoint: the plugin does not properly verify that the requester owns the targeted booking. An unauthentic...

CVE-2026-13144

WP Travel is a WordPress plugin that before version 12.0.2 fails to properly verify requester authorization on one branch of its bank-deposit handler. An unauthenticated attacker who knows a target customer's email address can reset that customer's booking payment to an unpaid state and wipe its ...

CVE-2025-15690

CVE-2025-15690 is a Stored Cross-Site Scripting (XSS) vulnerability in the Content Mask WordPress plugin, affecting versions 1.7.1 through 1.8.5.5 . The root cause is improper sanitization and escaping of post content—specifically scripts and styles submitted by an author—before being output in g...

CVE-2026-75905

The WP Recipe Maker WordPress plugin (versions ≤ 10.8.0 ) has an authorization bypass in class-wprm-recipe-saver.php, where the plugin fails to properly verify user authorization before performing actions. Authenticated attackers with contributor-level access or higher can take ownership of any a...

CVE-2026-8615

CVE-2026-8615 affects the Reviso Exporter for WooCommerce WordPress plugin in versions up to and including 1.2.3 . The root cause is a missing capability check and nonce verification on the disconnect_callback() function, registered to the wp_ajax_wcefr-disconnect AJAX action. This function uncon...

CVE-2026-76009

The Next-Cart Store to WooCommerce Migration WordPress plugin (versions ≤ 3.9.8) is vulnerable to unauthenticated authentication bypass via the NCWM_Kitconnect::run() function. The REST route /wp-json/next_cart/v1/migration is registered with permission_callback set to __return_true and relies on...

CVE-2026-84908

The WPFunnels WordPress plugin (versions ≤ 3.12.13 ) is vulnerable to Missing Authorization in its wpfnl_load_payment AJAX action, which is registered for both authenticated and unauthenticated users. The underlying add_offer_product_to_cart() function performs no nonce verification, no capabilit...

CVE-2026-83593

The WPBot – AI ChatBot plugin for WordPress (versions up to and including 8.7.3 ) is vulnerable to an unauthenticated Stored Cross-Site Scripting (XSS) flaw via the 'conversation' parameter . The root cause is insufficient input sanitization and output escaping , compounded by a nonce check that ...

CVE-2026-19946

The Awesome Support plugin for WordPress (versions up to and including 6.3.9 ) contains a Missing Authorization flaw in the wpas_do_mr_deny_user() function. Unlike its counterpart wpas_do_mr_activate_user(), this function fails to enforce a current_user_can('edit_users') capability check, relying...

CVE-2026-77262

CVE-2026-77262 affects sooperset/mcp-atlassian versions below 0.22.0. The confluence_upload_attachment MCP tool passes its file_path argument directly to open(file_path, "rb") with no path validation, enabling arbitrary file read (CWE-22 Path Traversal). Because the default streamable-http transp...

CVE-2026-11991

CVE-2026-11991 is an authorization bypass (CWE-639) in the FlowForms WordPress Conversational Form Builder plugin, affecting versions up to 1.1.1 . The REST API publish endpoint (/flowforms/v1/forms/{id}/publish) checks only the generic edit_posts capability—held by the Contributor role—without v...

CVE-2026-49926

CVE-2026-49926 affects the libjxl component in Android, as referenced by Android Security Bulletin entry ASB-A-513832249 . The vulnerability is a logic error that can lead to a remote denial of service without requiring additional execution privileges or user interaction. The CVE entry itself is ...

CVE-2026-49913

CVE-2026-49913 affects Android and resides in the descramble function of DescramblerImpl.cpp . The root cause is a precondition check failure that permits a possible arbitrary memory access , leading to local escalation of privilege without additional execution privileges or user interaction. The...

CVE-2026-21113

CVE-2026-21113 is an improper export of Android application components in Samsung VisualVoicemail prior to version 20.1.00.05 . The flaw allows local attackers with low privileges to initiate a call without proper permission , resulting in low impacts to confidentiality, integrity, and availabili...

CVE-2026-21112

CVE-2026-21112 is an improper input validation flaw in Samsung Tips prior to Android 17 . A local attacker with low privileges can launch an arbitrary activity with Samsung Tips privilege , resulting in high confidentiality impact on the vulnerable system. User interaction is required to trigger ...

CVE-2026-21111

CVE-2026-21111 is an out-of-bounds write vulnerability in the libsthmbc.so library affecting Samsung One UI devices prior to One UI 8.5 . A local attacker with low privileges can write to out-of-bounds memory, potentially compromising the confidentiality of the vulnerable system (CVSS 4.0 score 6...

CVE-2026-45529

CVE-2026-45529 affects Android , specifically the queryInternal method in MmsSmsProvider.java . The root cause is a confused deputy that allows MMS/SMS data to be accessed across user profiles . The impact is local escalation of privilege with no additional execution privileges required and no us...

CVE-2026-21110

CVE-2026-21110 is an out-of-bounds write vulnerability in libsavscmn.so affecting Samsung devices running One UI prior to 8.5 . A local attacker with low privileges can exploit this flaw to achieve arbitrary code execution on the vulnerable system. The CVSS 4.0 base score is 6.9 (MEDIUM) , reflec...

CVE-2026-21109

CVE-2026-21109 is an improper access control vulnerability in Samsung's Watch Plugin , affecting versions prior to Android Watch 17 . A local attacker with no required privileges can access sensitive information , resulting in low confidentiality impact. The CVSS 4.0 score is 2.1 (LOW) , with an ...

CVE-2026-21108

CVE-2026-21108 is an improper export of Android application components in Bixby Touch prior to version 4.3.01.17 . The flaw allows a local attacker with no prior privileges and no user interaction to access sensitive information , resulting in a high confidentiality impact . Samsung Mobile rates ...

CVE-2026-21107

CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...

CVE-2026-21106

CVE-2026-21106 is an improper verification of intent by a broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 . A local attacker with no privileges required can exploit this flaw to disable enhanced data protection settings , resulting in a low availability impact. The vendor-ass...

CVE-2026-21105

An improper access control flaw in Samsung's Collection app on Android 15 (prior to version 1.0.1.14) and Android 16 (prior to version 2.0.02.7) allows local attackers to access sensitive information without requiring privileges or user interaction. The vulnerability is rated CVSS 4.0 5.9 (MEDIUM...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

CVE-2026-21103

CVE-2026-21103 is a path traversal vulnerability in Samsung's GalaxyDiagnostics component, affecting versions prior to SMR Sep-2026 Release 1 . A physical attacker with no required privileges or user interaction can exploit this flaw to access files with system privilege , resulting in high confi...

CVE-2026-21102

This critical (CVSS 4.0: 9.3) vulnerability is a use-after-free in the DualDAR component of Samsung mobile devices, prior to the SMR September 2026 Release 1 . A local privileged attacker can leverage the flaw to execute arbitrary code with root privileges , resulting in high impact on confidenti...

CVE-2026-21101

CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...