377374 matches found
CVE-2026-57370
Summary (CVE-2026-57370): Unauthenticated reflected Cross Site Scripting (XSS) in WordPress plugin Visitor Traffic Real Time Statistics Pro versions
CVE-2026-57367
CVE-2026-57367 affects the WordPress plugin WP Booking System, specifically versions prior to 5.12.8.1. The vulnerability is a Broken Access Control issue impacting the plugin’s ability to enforce access permissions, with exposed integrity risk (High) and limited availability impact as per Patchs...
CVE-2026-27423
Technical details (affected versions, root cause, impact, patches) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-27422
The CVE-2026-27422 entry concerns the WordPress YT Player plugin (versions
CVE-2026-27418
The CVE-2026-27418 entry concerns the WordPress plugin WP Fast Total Search
CVE-2026-27399
CVE-2026-27399 concerns the WordPress MarketKing plugin, versions ≤ 2.1.40. The connected documents describe an Unauthenticated Broken Access Control vulnerability in MarketKing, meaning an unauthenticated attacker can bypass access controls. The exact impact details (which data or actions are ex...
CVE-2026-27403
CVE-2026-27403 concerns the WordPress Hubbub Lite plugin, versions
CVE-2026-27391
Technical details about CVE-2026-27391 are not publicly available in the provided documents. Monitoring for updates is advised.
CVE-2026-27392
CVE-2026-27392 affects the WordPress uListing plugin
CVE-2026-27377
CVE-2026-27377 affects the WordPress plugin QuickCal – Appointment Booking Calendar for WordPress (versions
CVE-2026-27355
CVE-2026-27355 affects WordPress Ditty plugin versions
CVE-2026-27372
The CVE concerns WordPress plugin PeproDev Ultimate Invoice (admin URL not needed) for affected versions
CVE-2026-27064
CVE-2026-27064 affects the WordPress Mailster plugin, versions
CVE-2026-25427
CVE-2026-25427 affects the WordPress plugin eRoom (versions ≤ 1.7.1). The description identifies a Broken Access Control issue for subscribers, but the available documents do not provide technical details, affected files, root cause, exploitability, or remediation steps. No exploitation informati...
CVE-2026-25466
CVE-2026-25466 affects the WordPress WP Go Maps plugin (vulnerable:
CVE-2026-25424
CVE-2026-25424 concerns the WordPress Mediavine Control Panel plugin, affected in versions
CVE-2026-25405
CVE-2026-25405 affects the WordPress eRoom plugin (≤ 1.7.1). It is a reported SQL Injection vulnerability. CVSSv3.1: 8.5 (HIGH), NETWORK, LOW privileges, no user interaction, confidentiality impact HIGH, integrity and availability variances (I: NONE, A: LOW), scope changed. Connected documents pr...
CVE-2026-24639
The CVE-2026-24639 entry concerns the WordPress Photo Block plugin (