377908 matches found
CVE-2026-57400
The CVE-2026-57400 entry concerns the WordPress plugin Event Tickets Manager for WooCommerce. A Missing Authorization vulnerability is described as due to Incorrectly Configured Access Control Security Levels, affecting the plugin’s “Event Tickets Manager for WooCommerce” component in versions up...
CVE-2026-57697
The CVE-2026-57697 entry concerns the WordPress ProfileGrid plugin (Metagauss) ≤ 5.9.9.6, where an Authentication Bypass via an Alternate Path or Channel allows Password Recovery Exploitation. The NVD entries describe a vulnerable component (ProfileGrid) with a base score of 7.5 (HIGH) per CVSS 3...
CVE-2026-57702
The WordPress Amelia plugin (Amelia ameliabooking)
CVE-2026-57719
CVE-2026-57719 affects the WordPress plugin Aimogen Pro (versions up to and including 2.8.3). The vulnerability is described as Unrestricted Upload of File with Dangerous Type (Arbitrary File Upload) in Aimogen Pro, allowing attackers to upload malicious files. The CVSS v3.1 metrics indicate a ba...
CVE-2026-57421
CRM Perks Forms WordPress plugin (versions
CVE-2026-57415
The CVE-2026-57415 issue affects the WordPress Gift Vouchers plugin (versions
CVE-2026-57396
CVE-2026-57396 is a Stored XSS vulnerability in the WordPress Free Gifts for WooCommerce plugin (versions up to 13.1.0). It stems from improper input neutralization during web page generation and can affect the plugin’s output. The CVSS 3.1 vector indicates network attack, no privileges required,...
CVE-2026-57708
Affected product/versions: WordPress WordPress plugin “Contact Form Entries” (contact-form-entries)
CVE-2026-57694
CVE-2026-57694 affects the WordPress Tutor LMS plugin up to version 3.9.13, describing an insecure direct object reference (IDOR) vulnerability that enables an authorization bypass via a user-controlled key. The root cause is misconfigured access controls that allow access to restricted resources...
CVE-2026-57711
CVE-2026-57711 concerns the WordPress plugin SupportCandy
CVE-2026-57399
The CVE-2026-57399 affects the WordPress plugin Proxy & VPN Blocker (versions up to and including 3.5.8). The issue is a Stored XSS flaw caused by improper neutralization of input during web page generation, enabling an attacker to inject script content that is stored and later rendered. Affected...
CVE-2026-57410
CVE-2026-57410 is a known privilege escalation vulnerability in the WordPress MailerPress plugin, affecting versions up to 2.0.2. The issue is described as an incorrect privilege assignment that enables privilege escalation. CVSS 3.1 base metrics indicate high severity (8.8), with network attack ...
CVE-2026-57706
CVE-2026-57706 affects the WordPress Dokan Dokan-lite plugin (v
CVE-2026-57713
CVE-2026-57713 : The WordPress Plugins Events Manager (events-manager ) is affected up to version 7.3.6. The issue is a PHP Object Injection caused by deserialization of untrusted data, enabling object injection. The affected component is the Events Manager plugin for WordPress; root cause is des...
CVE-2026-57422
CVE-2026-57422 concerns a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Bopo – WooCommerce Product Bundle Builder (bopo-woo-product-bundle-builder). The issue arises from improper input neutralization during web page generation, allowing an attacker to inject script v...
CVE-2026-57693
CVE-2026-57693 concerns the WordPress Ad Inserter plugin (versions up to and including 2.8.11). The issue is an Improper Neutralization of Input During Web Page Generation (XSS) that allows exploitation via incorrectly configured access control. Affected component: Ad Inserter (WordPress plugin)....
CVE-2026-57412
The CVE-2026-57412 entry concerns the WordPress Gift Vouchers plugin (versions up to 4.6.9). The vulnerability is described as a Missing Authorization issue caused by Incorrectly Configured Access Control Security Levels, i.e., a Broken Access Control vulnerability. Affected component: gift-vouch...
CVE-2026-57402
CVE-2026-57402 concerns the WordPress plugin Flexible Refund and Return Order for WooCommerce (versions
CVE-2026-57738
CVE-2026-57738 affects WordPress Theme 777 (axiomthemes) up to version 1.13.0. The issue is a PHP object‑injection via deserialization of untrusted data in the 777 plugin/theme, enabling arbitrary object injection with high impact (CVSS 3.1: 9.8, Network attack, no user interaction). Connected so...