CVE-2026-78474

The Ni WooCommerce Sales Report WordPress plugin (versions before 4.2.0 ) lacks authentication and authorisation checks on a report-printing routine accessible via the btn_print parameter. This allows unauthenticated users to retrieve WooCommerce order details and customer contact information , t...

CVE-2026-82124

The Schema & Structured Data for WP & AMP WordPress plugin versions prior to 1.66 fail to check whether a post is password-protected before including its content in the structured data it generates (specifically JSON-LD Schema Output ). This allows unauthenticated users to retrieve the content of...

CVE-2026-82126

Schema & Structured Data for WP & AMP WordPress plugin versions 1.63–1.65 (before 1.66) contain an authorization flaw in the AI schema generation feature. The plugin does not verify that the requesting user is permitted to edit the specific post they request schema generation for, allowing any us...

CVE-2026-82125

CVE-2026-82125 affects the Schema & Structured Data for WP & AMP WordPress plugin, versions 1.46 through 1.65 . The plugin fails to verify comment ownership or moderation status before returning comment content, an IDOR (Insecure Direct Object Reference) flaw. This allows unauthenticated users to...

CVE-2026-76556

WP Import Export Lite WordPress plugin (versions before 3.9.33 ) is vulnerable to an authenticated SQL injection via improperly sanitised export filter values used in SQL statements. Any user holding the plugin's export permission—granted by default to administrators and potentially to lower role...

CVE-2026-76557

CVE-2026-76557 affects the WP Import Export Lite WordPress plugin in versions before 3.9.33 . Some import configuration values are not properly sanitised and escaped before being used in SQL statements, enabling an authenticated user whose role has been granted the plugin's import permission to p...

CVE-2026-76559

CVE-2026-76559 is a Server-Side Request Forgery (SSRF) in the WP Import Export Lite WordPress plugin, affecting versions before 3.9.33 . The root cause is improper URL validation during the import process, which allows users with the import capability (held by administrators by default ) to make ...

CVE-2026-76558

CVE-2026-76558 affects the WP Import Export Lite WordPress plugin in versions before 3.9.33 . The root cause is that custom field names retrieved from the database are not escaped before being inserted into the DOM of an administration screen, enabling a Stored DOM XSS attack. An attacker with a ...

CVE-2026-76555

The WP Import Export Lite WordPress plugin (versions before 3.9.33 ) contains an authenticated sensitive file disclosure vulnerability via path traversal in its existing file import functionality. A user with the plugin's import permission (typically granted by an administrator) can supply an unv...

CVE-2026-77702

The Eventin (WP Event Solution) WordPress plugin before version 4.1.24 is vulnerable to an unauthenticated ticket price rewrite via a reused order_token. A token issued to a guest at checkout is not invalidated afterward, allowing an attacker to reuse it to modify that order's tickets — replacing...

CVE-2026-76551

WP Import Export Lite WordPress plugin versions prior to 3.9.33 are vulnerable to authenticated remote code execution (RCE) . The plugin fails to restrict which PHP function can be applied to exported field values, so any user with the plugin's export permission can invoke arbitrary PHP functions...

CVE-2026-76552

The WP Import Export Lite WordPress plugin before version 3.9.33 contains an authenticated arbitrary file upload vulnerability. The plugin does not validate the type, extension, or content of files retrieved from a user-supplied URL during import, allowing any user granted the import permission t...

CVE-2026-74926

CVE-2026-74926 affects the MultiVendorX WordPress plugin in versions 5.0.0 through 5.0.15 . The root cause is a missing ownership verification check in the plugin's stores REST API endpoint , which allows any authenticated user with at least the Subscriber role to overwrite arbitrary store detail...

CVE-2026-76553

The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the resolved directory. This allows any user with a delegated plugin capability (high privilege) to delete arbitrary directories and all files within...

CVE-2026-76550

The WP Import Export Lite WordPress plugin before 3.9.34 fails to validate a user-supplied output path when writing export files. This path traversal flaw allows any authenticated user granted the plugin's export permission to write files with arbitrary names to arbitrary locations on the server,...

CVE-2026-92358

Keycloak 's first broker login flow contains a flaw where a temporary proof created during a cross-browser account-linking request is not properly cleared after the link is established or manually removed. An attacker who controls the external identity can exploit this residual proof to silently ...

CVE-2026-18555

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) via the icn parameter in all versions up to and including 2.15.22 . The root cause is insufficient input sanitization and output escaping. An unauth...

CVE-2026-89063

The Bookly WordPress plugin (Online Scheduling and Appointment Booking System) is vulnerable to an Insecure Direct Object Reference (IDOR) via the conversation_id parameter in all versions up to and including 28.1 . Due to missing validation on this user-controlled key, unauthenticated attackers ...

CVE-2026-5920

Bold Page Builder (WordPress plugin, versions up to and including 5.9.6 ) is vulnerable to Stored Cross-Site Scripting via the shortcode_content parameter of the bt_bb_shortcode shortcode. The root cause is a bypassable security filter (bt_bb_save_pre) that can be circumvented via null byte injec...

CVE-2026-11996

The Advanced Popups WordPress plugin (versions ≤ 1.2.3 ) is vulnerable to Stored Cross-Site Scripting via the 'Notification Button Link' field, caused by insufficient input sanitization and output escaping. Authenticated attackers with author-level access or above can inject arbitrary web scripts...