CVE-2026-96558

The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting in all versions up to and including 11.2.6 . The flaw stems from insufficient input sanitization and output escaping of the 'qsm_hidden_questions' parameter. An unauthenticated attacker ca...

CVE-2026-108502

The ZTE Z80 Ultra product is vulnerable to an information disclosure vulnerability. This flaw allows third-party applications to read relevant information by hooking system APIs . The vulnerability is associated with CWE-269 (Improper Privilege Management). No specific details regarding affected ...

CVE-2026-94256

The SMS Alert WordPress plugin, in versions prior to 4.0.1 , contains an improper authentication vulnerability (CWE-287). The root cause is a failure to verify that the account being accessed matches the account associated with a verified one-time code. This allows unauthenticated attackers to by...

CVE-2026-94257

The SMS Alert WordPress plugin (versions 3.9.6 - 4.0.0 ) is vulnerable to unauthenticated privilege escalation due to a missing bond between the account being modified and the verified phone number during the OTP password reset process. This flaw allows an unauthenticated attacker to set a new pa...

CVE-2026-107120

The Contest Gallery WordPress plugin, in versions prior to 33.0.1 , is vulnerable to an unauthenticated email verification bypass. The root cause is a failure to limit the number of attempts against the front-end registration email-verification step, which utilizes a short numeric PIN . An attack...

CVE-2026-85571

The Tutor LMS WordPress plugin, prior to version 4.1.1 , is vulnerable to an Insecure Direct Object Reference (IDOR) flaw. The application fails to verify if the posts specified in course content ordering requests belong to a course managed by the requester. This allows users with instructor leve...

CVE-2026-107323

The Gallery PhotoBlocks WordPress plugin versions before 1.3.6 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape specific gallery settings before they are rendered into an HTML attribute. This allows users with Contributor-level acc...

CVE-2026-107321

The W3 Total Cache WordPress plugin, in versions prior to 2.10.6 , is vulnerable to a path traversal flaw during the media-import process. The plugin fails to confine file copies to the document root and lacks effective file-type restrictions. This allows users with Author privileges or higher to...

CVE-2026-87780

The LTL Freight Quotes – Old Dominion Edition WordPress plugin versions before 4.2.19 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape values submitted via an unauthenticated endpoint before they are stored and subsequently rendered on an a...

CVE-2026-87781

The LTL Freight Quotes – Old Dominion Edition WordPress plugin is vulnerable to SQL injection in versions prior to 4.2.19 . The root cause is the failure to properly sanitize and escape the Shipping Rule 'edit_id' parameter before including it in a SQL statement. This flaw allows unauthenticated ...

CVE-2026-105989

The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions before 4.0.7 , is vulnerable to unauthenticated transaction status forgery. The root cause is a lack of authorization and request-validation checks on one of its AJAX actions. This allows an unauthenticated attacker to ...

CVE-2026-105995

The Booking Package WordPress plugin, in versions before 1.7.30 , is vulnerable to an information disclosure flaw. The plugin fails to perform necessary authorization checks before returning stored reservation data. This allows unauthenticated users to access and disclose sensitive information, i...

CVE-2026-105977

The Portfolio Filter Gallery WordPress plugin versions before 2.2.1 is vulnerable to an authorization bypass due to a lack of per-object authorization checks. Specifically, the pfg_delete_video_thumbnail function fails to verify ownership, allowing users with the Contributor role and above to per...

CVE-2026-105990

The Accept PayPal Payments using Contact Form 7 WordPress plugin, in versions prior to 4.0.7 , is vulnerable to an unauthenticated PII disclosure . The root cause is a lack of authorization checks when exporting stored form submissions. This flaw allows unauthenticated attackers to download sensi...

CVE-2026-105976

The Portfolio Filter Gallery WordPress plugin (versions before 2.2.1 ) is vulnerable to an incorrect authorization flaw (CWE-863). The plugin fails to perform proper authorization checks within a set of AJAX actions , which allows users with at least the Contributor role to perform unauthorized a...

CVE-2026-104752

The Rank Math SEO WordPress plugin, in versions prior to 1.0.280 , is vulnerable to remote code execution (RCE) . The root cause is an unrestricted upload of file with dangerous type (CWE-434) within the settings import feature, which fails to correctly validate the type of uploaded files. This a...

CVE-2026-104753

The Rank Math SEO WordPress plugin, in versions prior to 1.0.280 , is vulnerable to SQL injection due to insufficient sanitization and escaping of the 'per_page' parameter before it is used in a SQL query. This vulnerability allows users with high privileges, such as administrators , to perform u...

CVE-2026-104754

The Rank Math SEO WordPress plugin (versions before 1.0.280 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a failure to escape a stored redirection source value. An attacker with permissions to manage redirections (typically Administrators ) can inject malicious JavaScript that execu...

CVE-2026-17025

The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.9.4 . The root cause is insufficient input sanitization and output escaping within the 'Current location' and 'Author profile image URL' profile fields. This allows authentica...

CVE-2026-12054

The Download Manager plugin for WordPress is vulnerable to unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) in all versions up to and including 3.3.57 . The root cause is insufficient input sanitization and output escaping regarding the 'REFERRER' parameter . This flaw allows an una...