CVE-2026-85131

WPLP Cookie Consent (WordPress plugin, also known as WP Cookie Notice for GDPR, CCPA & ePrivacy Consent) versions before 4.4.4 are vulnerable to arbitrary post and page deletion via CSRF. The plugin fails to perform CSRF or capability checks when processing bulk actions on its administration scre...

CVE-2026-84907

Eventin (WP Event Solution) WordPress plugin versions 4.1.5 through 4.1.23 fail to properly authorise order finalisation when the offline (local) payment method is enabled. The flaw is a nonce exposed to unauthenticated visitors that is never validated against the caller's order ownership via the...

CVE-2026-84829

CVE-2026-84829 is an unauthenticated Stored XSS in the Optimole WordPress plugin (versions 4.2.3–4.2.11 ). The root cause is improper escaping of a user-supplied srcset descriptor value before it is used to build an image tag attribute, allowing an unauthenticated attacker to inject arbitrary HTM...

CVE-2026-84905

The Eventin WordPress plugin (also known as WP Event Solution) before 4.1.24 contains a privilege escalation vulnerability discovered by Karthik Ramakrishnan. When adding a speaker, the plugin fails to verify the acting user's capability to create accounts. This allows any user with contributor-l...

CVE-2026-78474

The Ni WooCommerce Sales Report WordPress plugin (versions before 4.2.0 ) lacks authentication and authorisation checks on a report-printing routine accessible via the btn_print parameter. This allows unauthenticated users to retrieve WooCommerce order details and customer contact information , t...

CVE-2026-78472

The Ni WooCommerce Sales Report WordPress plugin (versions before 4.2.0 ) contains an unauthenticated SQL injection vulnerability caused by a failure to sanitise and escape the sort parameter before use in a SQL statement. Discovered by Erwan LR (WPScan) via Patchstack, this allows remote attacke...

CVE-2026-82126

Schema & Structured Data for WP & AMP WordPress plugin versions 1.63–1.65 (before 1.66) contain an authorization flaw in the AI schema generation feature. The plugin does not verify that the requesting user is permitted to edit the specific post they request schema generation for, allowing any us...

CVE-2026-82124

The Schema & Structured Data for WP & AMP WordPress plugin versions prior to 1.66 fail to check whether a post is password-protected before including its content in the structured data it generates (specifically JSON-LD Schema Output ). This allows unauthenticated users to retrieve the content of...

CVE-2026-82125

CVE-2026-82125 affects the Schema & Structured Data for WP & AMP WordPress plugin, versions 1.46 through 1.65 . The plugin fails to verify comment ownership or moderation status before returning comment content, an IDOR (Insecure Direct Object Reference) flaw. This allows unauthenticated users to...

CVE-2026-76557

CVE-2026-76557 affects the WP Import Export Lite WordPress plugin in versions before 3.9.33 . Some import configuration values are not properly sanitised and escaped before being used in SQL statements, enabling an authenticated user whose role has been granted the plugin's import permission to p...

CVE-2026-76556

WP Import Export Lite WordPress plugin (versions before 3.9.33 ) is vulnerable to an authenticated SQL injection via improperly sanitised export filter values used in SQL statements. Any user holding the plugin's export permission—granted by default to administrators and potentially to lower role...

CVE-2026-76559

CVE-2026-76559 is a Server-Side Request Forgery (SSRF) in the WP Import Export Lite WordPress plugin, affecting versions before 3.9.33 . The root cause is improper URL validation during the import process, which allows users with the import capability (held by administrators by default ) to make ...

CVE-2026-76558

CVE-2026-76558 affects the WP Import Export Lite WordPress plugin in versions before 3.9.33 . The root cause is that custom field names retrieved from the database are not escaped before being inserted into the DOM of an administration screen, enabling a Stored DOM XSS attack. An attacker with a ...

CVE-2026-76555

The WP Import Export Lite WordPress plugin (versions before 3.9.33 ) contains an authenticated sensitive file disclosure vulnerability via path traversal in its existing file import functionality. A user with the plugin's import permission (typically granted by an administrator) can supply an unv...

CVE-2026-77702

The Eventin (WP Event Solution) WordPress plugin before version 4.1.24 is vulnerable to an unauthenticated ticket price rewrite via a reused order_token. A token issued to a guest at checkout is not invalidated afterward, allowing an attacker to reuse it to modify that order's tickets — replacing...

CVE-2026-76552

The WP Import Export Lite WordPress plugin before version 3.9.33 contains an authenticated arbitrary file upload vulnerability. The plugin does not validate the type, extension, or content of files retrieved from a user-supplied URL during import, allowing any user granted the import permission t...

CVE-2026-76551

WP Import Export Lite WordPress plugin versions prior to 3.9.33 are vulnerable to authenticated remote code execution (RCE) . The plugin fails to restrict which PHP function can be applied to exported field values, so any user with the plugin's export permission can invoke arbitrary PHP functions...

CVE-2026-74926

CVE-2026-74926 affects the MultiVendorX WordPress plugin in versions 5.0.0 through 5.0.15 . The root cause is a missing ownership verification check in the plugin's stores REST API endpoint , which allows any authenticated user with at least the Subscriber role to overwrite arbitrary store detail...

CVE-2026-76550

The WP Import Export Lite WordPress plugin before 3.9.34 fails to validate a user-supplied output path when writing export files. This path traversal flaw allows any authenticated user granted the plugin's export permission to write files with arbitrary names to arbitrary locations on the server,...

CVE-2026-76553

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the resolved directory. This allows any user with a delegated plugin capability (high privilege) to delete arbitrary directories and all files within...