377405 matches found
CVE-2026-59517
CVE-2026-59517 concerns the WordPress plugin Easy Form Builder (versions <= 4.0.12). The supplied documents confirm an unauthenticated Cross-Site Scripting (XSS) vulnerability affecting this plugin, with the affected component/version explicitly stated as Easy Form Builder
CVE-2026-59522
The CVE-2026-59522 entry concerns the WordPress WP ERP plugin (versions
CVE-2026-59513
CVE-2026-59513 concerns the WordPress Masteriyo LMS plugin (versions ≤ 2.3.0). The issue is a Cross Site Scripting (XSS) vulnerability in the Subscriber context. Per Patchstack, the CVSSv3.1 base score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L , indicating network attack sur...
CVE-2026-59514
The CVE-2026-59514 entry concerns the WordPress Buddyboss Platform plugin, affected versions
CVE-2026-59512
CVE-2026-59512 describes an unauthenticated XSS in WordPress plugin Product Enquiry for WooCommerce, versions
CVE-2026-57808
The CVE-2026-57808 entry concerns the WordPress WP EasyPay plugin (
CVE-2026-57809
The CVE-2026-57809 entry describes an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress AffiliateWP plugin up to version 2.34.0 . Affected component is the plugin’s input handling leading to reflected XSS; the issue is exploitable without authentication. Official...
CVE-2026-57785
The CVE concerns the WordPress ApusListing theme (versions <= 1.2.63) with an unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The available data specify the affected product (ApusListing), the vulnerable version range (
CVE-2026-57784
CVE-2026-57784 : Unauthenticated Cross Site Request Forgery (CSRF) in the WordPress plugin Ninja Forms File Uploads Extension
CVE-2026-57769
CVE-2026-57769 describes an unauthenticated Cross Site Scripting (XSS) flaw in the WordPress Grand Photography theme up to version 5.7.8. Multiple sources (CVE lists, NVD, CVERecord, Patchstack) indicate a reflected XSS variant affecting that theme, enabling an attacker to inject scripts that exe...
CVE-2026-57767
WP Google Maps Pro plugin <= 10.1.02 has an unauthenticated Cross Site Scripting (XSS) vulnerability. Affects versions
CVE-2026-57735
CVE-2026-57735 concerns the WordPress Breakdance plugin, affected in versions ≤ 2.7.1, with unauthenticated Cross Site Scripting (XSS). The description and connected records confirm an XSS vulnerability exploitable without authentication, impacting Breakdance functionality through the specified v...
CVE-2026-57717
CVE-2026-57717 corresponds to an unauthenticated broken access control vulnerability in the WordPress Knit Pay plugin, affecting versions
CVE-2026-57716
CVE-2026-57716 affects the WordPress plugin WordPress Broadcast Live Video (VideoWhisper Live Streaming Integration)
CVE-2026-57704
CVE-2026-57704 : Unauthenticated Cross Site Scripting (XSS) in the WordPress Smart Manager plugin for WP e‑commerce, versions ≤ 8.90.0. Root cause and specific exploit path are not detailed in the provided documents. CVSSv3.1 base score 7.1 (HIGH) with network attack vector and user interaction r...
CVE-2026-57703
CVE-2026-57703 affects WordPress Sunshine Photo Cart plugin versions
CVE-2026-57701
The CVE affects WordPress plugin Real Estate Manager Pro, versions
CVE-2026-57699
The CVE-2026-57699 entry concerns the WordPress Slider Pro plugin (versions ≤ 4.8.13) with a Cross Site Scripting (XSS) vulnerability affecting subscribers. The Patchstack-backed details identify the affected component and vulnerability type, with a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/...