408317 matches found
CVE-2026-97066
The GiveWP plugin for WordPress, versions
CVE-2026-97065
The Happyforms WordPress plugin versions
CVE-2026-96838
The Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification plugin for WordPress (versions
CVE-2026-96837
The CartFlows WordPress plugin (versions
CVE-2026-96836
The Parsi Date WordPress plugin versions
CVE-2026-96835
The King Addons for Elementor WordPress plugin versions
CVE-2026-96834
The WordPress GiveWP plugin versions
CVE-2026-96833
The Ultimate Addons for Contact Form 7 WordPress plugin, specifically versions
CVE-2026-96832
The WordPress Content Egg plugin (versions
CVE-2026-96831
The Themify Builder plugin for WordPress, version 7.8.1 and below , is vulnerable to a PHP Object Injection flaw. The vulnerability allows an attacker to potentially compromise the system's integrity, confidentiality, and availability. While the provided documents confirm the existence of the vul...
CVE-2026-96830
The GiveWP plugin for WordPress versions
CVE-2026-96829
The The Plus Addons for Elementor Page Builder Lite plugin for WordPress (versions
CVE-2026-96828
The WordPress Category Discount Woocommerce plugin (versions
CVE-2026-96825
The All In One WP Security & Firewall WordPress plugin, in versions
CVE-2026-96827
The WordPress Admin Notices Manager plugin (versions
CVE-2026-96824
The WordPress Template Kit – Import plugin, specifically versions
CVE-2026-96823
The Customer Reviews for WooCommerce WordPress plugin (versions
CVE-2026-96822
The WordPress Books Gallery plugin, version 4.8.3 and below , is vulnerable to an unauthenticated SQL Injection . This vulnerability allows a remote attacker to execute arbitrary SQL commands against the database. Exploitation details are not provided in the documentation, and no specific remedia...
CVE-2026-96821
The FluentBoards plugin for WordPress versions
CVE-2026-96819
The oik WordPress plugin, specifically versions
CVE-2026-96820
The WordPress Awesome Support plugin (versions
CVE-2026-96818
The WP Express Checkout (Accept PayPal Payments) plugin for WordPress is affected by an unauthenticated Broken Access Control vulnerability in versions
CVE-2026-96817
The MakeCommerce for WooCommerce WordPress plugin (versions
CVE-2026-96816
The Trusted Shops Easy Integration for WooCommerce WordPress plugin (versions
CVE-2026-96815
The Vitepos plugin for WordPress (versions
CVE-2026-96450
The pixfort Core plugin for WordPress is vulnerable to a Cross Site Scripting (XSS) flaw in versions prior to 4.3.3 . The vulnerability allows an attacker with low privileges to perform a cross-site scripting attack, potentially impacting the integrity and confidentiality of the user session. No ...
CVE-2026-96814
The WooCommerce Product Table Lite WordPress plugin (versions
CVE-2026-96352
The YITH WooCommerce Ajax Search plugin for WordPress, versions
CVE-2026-96351
The Classified Listing WordPress plugin, versions
CVE-2026-96350
The WordPress Estatik plugin (versions
CVE-2026-96348
The Bookly WordPress plugin (versions
CVE-2026-96349
The WordPress SiteSkite plugin versions
CVE-2026-96347
The Bookly WordPress plugin (versions
CVE-2026-96346
The WP ERP plugin for WordPress is vulnerable to SQL Injection in versions
CVE-2026-96345
The Estatik plugin for WordPress, version 4.3.5 and below , is vulnerable to an Administrator SQL Injection vulnerability. This flaw allows an attacker with high privileges to execute unauthorized SQL commands, potentially impacting confidentiality and availability. No specific exploit links or r...
CVE-2026-96344
The eCommerce Product Catalog plugin for WordPress (versions
CVE-2026-96343
The WP ERP plugin for WordPress, in versions
CVE-2026-96338
The WordPress Profile Builder plugin versions
CVE-2026-95587
The WordPress Hostinger Migrator plugin (version
CVE-2026-95531
The Conversational Forms for ChatBot WordPress plugin (versions
CVE-2026-94683
The DesignSetGo WordPress plugin, version 2.8.0 and below , is vulnerable to PHP Object Injection . This vulnerability allows an attacker to inject malicious objects into the application's execution flow. The documents do not provide specific details regarding the affected component, root cause, ...
CVE-2026-94681
The WP Store Locator WordPress plugin versions prior to 3.0.0 are vulnerable to an unauthenticated Denial of Service (DoS) attack. While the vulnerability allows an attacker to impact service availability, the provided documents do not specify the underlying root cause, specific affected function...
CVE-2026-94678
The Go Live Update Urls WordPress plugin versions
CVE-2026-94677
The Kadence WooCommerce Email Designer plugin for WordPress, versions
CVE-2026-94674
The WordPress Pixel Manager for WooCommerce plugin in versions
CVE-2026-94673
The Simply Schedule Appointments WordPress plugin versions
CVE-2026-94672
The Safe SVG WordPress plugin (versions
CVE-2026-94499
The FormGent WordPress plugin (versions ≤ 1.12.2 ) contains a Broken Access Control vulnerability affecting Subscriber accounts. The provided documents do not specify the exact technical root cause, specific files, or remediation steps. No exploits or in-the-wild exploitation details are provided.