400782 matches found
CVE-2026-87774
The Tz Weekly Radio Schedule WordPress plugin (through 1.8.1 ) is vulnerable to unauthenticated SQL injection via the week parameter. A parameter is not sanitized or escaped before being used to build a SQL query in an AJAX action accessible without authentication, allowing attackers to extract s...
CVE-2026-87770
The Price Drop Alert for WooCommerce WordPress plugin (versions ≤ 1.1 ) is vulnerable to unauthenticated SQL injection due to missing sanitization and escaping of parameters before use in a SQL query on an AJAX action related to product . The vulnerability, discovered by Theo Antônio Da Fonseca ,...
CVE-2026-87771
The Product Question and Answer WordPress plugin (through 1.1.0 ) is vulnerable to unauthenticated SQL injection via the p_id and read parameters on AJAX actions. The root cause is the failure to sanitize and escape these parameters before using them in SQL queries, allowing an unauthenticated at...
CVE-2026-85123
CVE-2026-85123 affects the Easy Form Builder by WhiteStudio WordPress plugin, versions 4.0.0 through 4.1.3 . The plugin fails to validate a submitted value against the stored configuration for certain form types, specifically a login form type confusion , allowing unauthenticated users to create ...
CVE-2026-85127
CVE-2026-85127 affects the VikBooking Hotel Booking Engine & PMS WordPress plugin, versions 1.8.8 through 1.8.14 . The plugin does not restrict the type of files that unauthenticated visitors can attach to its live chat feature, nor does it sanitize their contents. This allows an attacker to stor...
CVE-2026-85350
UpsellWP is a WordPress plugin that provides product upselling features. Versions before 2.2.10 contain a flaw in the Frequently Bought Together campaign feature: the plugin fails to validate that products added to the cart through a campaign actually belong to that campaign. This allows unauthen...
CVE-2026-85122
The Easy Form Builder WordPress plugin by WhiteStudio (versions 4.0.0–4.1.3 ) is vulnerable to an unauthenticated Stored XSS via form type confusion. The plugin fails to validate submitted values against the stored configuration for certain form types, allowing unauthenticated attackers to inject...
CVE-2026-84738
CVE-2026-84738 affects the AF Companion WordPress plugin before version 2.2.0 . The plugin fails to validate the type of files uploaded through one of its import features, allowing users with the low-privileged Store Manager role to upload arbitrary files, including PHP, leading to Remote Code Ex...
CVE-2026-84904
King Addons for Elementor WordPress plugin versions 51.1.56 through 51.1.80 contain a missing per-object authorization vulnerability in its image-optimization actions. The checks are gated only on a coarse capability that lower-privileged users also hold, without confirming ownership of the targe...
CVE-2026-84903
King Addons for Elementor WordPress plugin versions before 51.1.81 are vulnerable to an authorization bypass via the kng_maintenance_page shortcode , which fails to perform capability, post-status, or password checks before rendering a user-supplied post's content. Users with Contributor-level ac...
CVE-2026-81810
All-in-One WP Migration and Backup (WordPress plugin) before 7.111 fails to perform capability checks on several AJAX actions, gating them only on an installation-wide secret key. This secret is disclosed to any user with site export capability, allowing such a user to import an arbitrary site ar...
CVE-2026-84902
King Addons for Elementor (WordPress plugin) versions before 51.1.81 lack an object-level authorization check when importing template content into a page. Users with contributor-level access or higher can overwrite the Elementor content of arbitrary posts and pages —including those owned by admin...
CVE-2026-85009
The RestroPress WordPress plugin (versions ≤ 3.4.6 ) contains an unauthenticated order enumeration and note modification vulnerability in its payment-recovery flow . The plugin does not verify ownership before acting on a request-supplied order identifier, allowing unauthenticated attackers to en...
CVE-2026-81340
The MasterStudy LMS WordPress Plugin (versions before 3.7.50 ) is vulnerable to an IDOR (Insecure Direct Object Reference) in its REST API order-update endpoint . The plugin fails to perform per-object ownership or capability checks, allowing any user with the Instructor role (or higher) to modif...
CVE-2026-93485
Automattic WordPress core (versions 4.7 through 7.1) is affected by a DOM-Based XSS vulnerability in input neutralization during web page generation. The vulnerability is unauthenticated and reproducible on a default WordPress installation: comment moderation is disabled by default, and the requi...
CVE-2026-18912
ManageEngine DataSecurity Plus versions prior to 6310 are affected by an authenticated SQL injection vulnerability in the Reports module . An attacker with technician-level credentials can execute arbitrary SQL queries, leading to high confidentiality impact (data exfiltration) with a changed sco...
CVE-2026-18911
ManageEngine DataSecurity Plus versions prior to 6310 are affected by an agent authentication bypass that allows unenrolled agents to send requests to the product without proper authentication. The vulnerability is scored CVSS 7.5 (High) with a network attack vector, high attack complexity, no re...
CVE-2023-39725
This candidate is reserved with no public technical details in the provided documents. A proof-of-concept sighting was reported on Telegram, but no affected product, root cause, or impact is yet specified. Monitor for updates.
CVE-2025-25347
CVE-2025-25347 affects QingLong Panel , an open-source task automation management platform. The root cause is the absence of adequate input validation and access control on certain endpoints, enabling remote code execution (RCE) . An attacker without valid authentication can execute arbitrary sys...