434079 matches found
EUVD-2026-60814
Contributor Broken Access Control in WP Table Builder = 2.2.0 versions...
EUVD-2026-60813
Subscriber Broken Access Control in Gravity Booster Styles & Layouts for Gravity Forms = 6.0 versions...
EUVD-2026-60812
Contributor Broken Access Control in RomethemeForm For Elementor = 1.2.6 versions...
EUVD-2026-60811
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...
EUVD-2026-60810
Unauthenticated Arbitrary File Upload in Masteriyo - LMS = 2.3.2 versions...
EUVD-2026-60809
Subscriber Broken Authentication in User Registration = 5.2.6 versions...
EUVD-2026-60808
Unauthenticated Broken Access Control in Charitable = 1.8.11.3 versions...
EUVD-2026-60807
Subscriber Broken Access Control in MasterStudy LMS = 3.7.41 versions...
EUVD-2026-60806
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...
EUVD-2026-60805
Unauthenticated Broken Authentication in Flutterwave WooCommerce = 3.3.0 versions...
EUVD-2026-60804
Unauthenticated Broken Authentication in Piraeus Bank WooCommerce Payment Gateway 3.2.0 versions...
EUVD-2026-60802
Subscriber Broken Authentication in MWB HubSpot for WooCommerce = 1.6.7 versions...
EUVD-2026-60803
Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...
EUVD-2026-60801
Unauthenticated Insecure Direct Object References IDOR in Booking calendar, Appointment Booking System = 3.2.36 versions...
EUVD-2026-60800
Unauthenticated Cross Site Scripting XSS in Subscribe2 = 10.46 versions...
EUVD-2026-60799
Unauthenticated SQL Injection in Super Store Finder = 7.8 versions...
EUVD-2026-60798
Shop manager Arbitrary File Download in CTX Feed = 6.6.47 versions...
EUVD-2026-60797
Unauthenticated Cross Site Scripting XSS in Site Reviews = 8.2.0 versions...
EUVD-2026-60796
Unauthenticated Broken Authentication in Popup by Supsystic = 1.13.0 versions...
EUVD-2026-60795
Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...
EUVD-2026-60794
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...
EUVD-2026-60793
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
EUVD-2026-60792
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic 1.5.0 versions...
EUVD-2026-60791
Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic 1.5.0 versions...
EUVD-2026-60789
Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...
EUVD-2026-60790
Unauthenticated Cross Site Scripting XSS in Ultimate Maps by Supsystic 1.5.0 versions...
EUVD-2026-60788
Unauthenticated PHP Object Injection in Easy Google Maps = 1.13.0 versions...
EUVD-2026-60787
Unauthenticated SQL Injection in JetAppointment = 2.5.2 versions...
EUVD-2026-60786
Unauthenticated Cross Site Scripting XSS in URL Shortify = 2.5.0 versions...
EUVD-2026-60785
Unauthenticated Cross Site Scripting XSS in Recipe Card Blocks for Gutenberg & Elementor = 3.4.18 versions...
EUVD-2026-60783
Subscriber Cross Site Scripting XSS in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent = 4.3.9 versions...
EUVD-2026-60784
Unauthenticated Cross Site Scripting XSS in Chaty Pro = 3.5.8 versions...
EUVD-2026-60782
Unauthenticated Cross Site Scripting XSS in Affiliates Manager = 2.9.53 versions...
EUVD-2026-60781
Unauthenticated Arbitrary Content Deletion in Breeze = 2.5.12 versions...
EUVD-2026-60780
Unauthenticated SQL Injection in Affiliates Manager = 2.9.53 versions...
EUVD-2026-60779
Unauthenticated Broken Access Control in GiveWP = 4.16.5.1 versions...
EUVD-2026-60778
Unauthenticated Cross Site Scripting XSS in WordPress Social Login and Register = 7.8.1 versions...
EUVD-2026-60777
Unauthenticated Broken Authentication in SupportCandy = 3.5.1 versions...
EUVD-2026-60776
Unauthenticated Broken Access Control in GiveWP 4.16.6 versions...
EUVD-2026-60775
Customer SQL Injection in License Manager for WooCommerce = 3.0.18 versions...
EUVD-2026-60774
Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...
EUVD-2026-60773
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched...
EUVD-2026-60772
Unauthenticated Cross Site Scripting XSS in WP Multilang = 2.4.31 versions...
EUVD-2026-60771
Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...
EUVD-2026-60770
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
EUVD-2026-60769
Unauthenticated Cross Site Scripting XSS in Autopay = 5.0.0 versions...
EUVD-2026-60768
Unauthenticated Cross Site Scripting XSS in WPDM – Premium Packages = 7.0.5 versions...
EUVD-2026-60939
Subscriber Insecure Direct Object References IDOR in WP Crowdfunding 2.2.1 versions...