375775 matches found
CVE-2026-61977
The CVE-2026-61977 entry concerns the WordPress JetSearch plugin (JetSearch) vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere, allowing retrieval of embedded sensitive data. Affected: WordPress JetSearch plugin versions up to 3.6.1.2. Root cause details are...
CVE-2026-57776
CVE-2026-57776 affects the WordPress VW Wedding theme (vw-wedding) up to version 1.3.7. The issue is described as a Missing Authorization / Broken Access Control vulnerability resulting from incorrectly configured access control levels, allowing exploitation under the described scenario (per CVE ...
CVE-2026-57797
CVE-2026-57797 describes a Missing Authorization (Broken Access Control) vulnerability in the WordPress EduMall theme (ThemeMove EduMall) up to version 4.5.1. The NVD/CVE records and Patchstack entry indicate that access control levels were incorrectly configured, allowing unauthorized access to ...
CVE-2026-61976
CVE-2026-61976 affects Crocoblock JetBlocks For Elementor (WordPress plugin) up to version 1.5.0. The vulnerability is described as an Exposure of Sensitive System Information to an Unauthorized Control Sphere, enabling retrieval of embedded sensitive data. CVSS 3.1 metrics indicate a Network att...
CVE-2026-57814
The CVE-2026-57814 entry concerns the WordPress Forminator plugin (forms forminator) with a DOM-based XSS vulnerability due to improper input neutralization during web page generation. Affected versions are Forminator
CVE-2026-61983
The CVE-2026-61983 entry concerns a Missing Authorization vulnerability in the WordPress plugin Church Admin (vendor: andy_moyle) affecting church-admin up to version 5.0.30. The issue arises from an incorrectly configured access control security level, enabling unauthorized access due to lack of...
CVE-2026-61956
The CVE-2026-61956 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin sync-basalam (ووسلام – همگام سازی ووکامرس و باسلام) up to version 1.9.1. Affected component: the plugin’s CSRF handling exposes an attack surface enabling unauthorized actions initiated by...
CVE-2026-61985
CVE-2026-61985 affects the WordPress Car Rental Manager plugin (
CVE-2026-59523
CVE-2026-59523 affects the WordPress plugin Simply Schedule Appointments (
CVE-2026-57815
CVE-2026-57815 documents a path traversal vulnerability in the WordPress plugin Forminator (WPMU DEV Your All-in-One WordPress Platform Forminator) affecting version range up to and including 1.55.0.2. The issue is described as Improper Limitation of a Pathname to a Restricted Directory, enabling...
CVE-2026-57811
CVE-2026-57811 concerns WordPress Realtyna Organic IDX plugin (real-estate-listing-realtyna-wpl) with versions up to and including 5.2.0. The issue is labeled as an improper generation of code (Code Injection) vulnerability that enables Remote Code Inclusion. It affects the plugin’s handling of c...
CVE-2026-57787
CVE-2026-57787 affects CreativeWS CWS SVGicons (WordPress plugin)
CVE-2026-57795
CVE-2026-57795 affects the WordPress theme Kitchor (Themelexus) up to version
CVE-2026-57794
Technical details about CVE-2026-57794 are not provided in connected documents. The initial description states a PHP Local File Inclusion in Golo Framework
CVE-2026-61971
The CVE covers the WordPress plugin Metronet Profile Picture (Cozmoslabs User Profile Picture) insecure direct object references affecting versions
CVE-2026-57813
CVE-2026-57813 affects the WordPress MailOptin plugin, specifically versions up to 1.2.77.3. The vulnerability is an Incorrect Privilege Assignment that allows Privilege Escalation. Documented risk is high (CVSS v3.1: 9.8, Network, Privileges Required: None, User Interaction: None, Scope: Unchang...
CVE-2026-57408
CVE-2026-57408 affects the WordPress Peach Payments Gateway plugin wc-peach-payments-gateway
CVE-2026-57392
The CVE-2026-57392 entry concerns the WordPress Tourfic plugin (versions up to 2.22.5) with a Missing Authorization / Broken Access Control vulnerability. The root cause is misconfigured access control, enabling unauthorized access to protected resources or actions. Impact is described as broken ...
CVE-2026-57405
CVE-2026-57405 affects WordPress Open Shop theme (versions up to and including 1.7.1). The root cause is Missing Authorization due to incorrectly configured access control levels, classified as a Broken Access Control vulnerability. CVSS3.1 metrics indicate a HIGH base score of 7.1 (AV:N/AC:L/PR:...