Unknown - vulnerabilities (CVEs)

6267 CVEs in 4039 products, 543 in the last 30 days, newest from 2026-10-28.

Products

Moodle - 22 CVEs
Salon Booking System - 22 CVEs
Contest Gallery - 21 CVEs
Masterstudy Lms Wordpress Plugin - 20 CVEs
Download Manager - 19 CVEs
Kernel - 19 CVEs
Eventin - 18 CVEs
Contest Gallery Pro - 17 CVEs
Learnpress - 17 CVEs
Tutor Lms - 17 CVEs
Geodirectory - 16 CVEs
Modern Events Calendar Lite - 16 CVEs
Welcart E-commerce - 16 CVEs
Kirki - 15 CVEs
Ai Engine - 14 CVEs
Givewp - 14 CVEs
Quiz And Survey Master Qsm - 14 CVEs
User Registration Membership - 14 CVEs
Eventon - 13 CVEs
Wp Directory Kit - 13 CVEs
Elementor Website Builder - 12 CVEs
Frontend File Manager Plugin - 12 CVEs
Jenkins - 12 CVEs
Mstore Api - 12 CVEs
Photo Gallery - 12 CVEs
Rank Math Seo - 12 CVEs
Royal Addons For Elementor - 12 CVEs
Simple Membership - 12 CVEs
Easy Appointments - 11 CVEs
Newsletters - 11 CVEs
Ninja Forms - 11 CVEs
Registrationmagic - 11 CVEs
The Events Calendar - 11 CVEs
Truebooker - 11 CVEs
Tutor Lms Elearning And Online Course Solution - 11 CVEs
User Profile Builder - 11 CVEs
Ai Chatbot - 10 CVEs
Form Maker By 10web - 10 CVEs
Forminator Forms - 10 CVEs
Kivicare - 10 CVEs
Link Library - 10 CVEs
Logo Slider - 10 CVEs
Masteriyo Lms - 10 CVEs
Newsletter - 10 CVEs
Passster - 10 CVEs
Post Grid - 10 CVEs
Slider - 10 CVEs
Wp-emember - 10 CVEs
Wp Import Export Lite - 10 CVEs
Booking For Appointments And Events Calendar - 9 CVEs
Embedpress - 9 CVEs
Essential Addons For Elementor - 9 CVEs
Login Form - 9 CVEs
Ninja Forms Contact Form The Drag And Drop Form Builder For Wordpress - 9 CVEs
Patreon Wordpress - 9 CVEs
Photo Gallery By 10web - 9 CVEs
Popup Box - 9 CVEs
Samba - 9 CVEs
Wp Photo Album Plus - 9 CVEs
Wpematico Rss Feed Fetcher - 9 CVEs
Advanced Custom Fields Extended - 8 CVEs
Autoptimize - 8 CVEs
Booster For Woocommerce - 8 CVEs
Directorist Ai-powered Business Directory - 8 CVEs
Ditty - 8 CVEs
Events Manager - 8 CVEs
File Manager - 8 CVEs
Formidable Forms - 8 CVEs
Listings Classified Ads - 8 CVEs
Profilegrid - 8 CVEs
Proofing And Themes - 8 CVEs
Sliders - 8 CVEs
Vikbooking Hotel Booking Engine Pms - 8 CVEs
Wp-affiliate-platform - 8 CVEs
Wp-cart-for-digital-products - 8 CVEs
Wp Hotel Booking - 8 CVEs
Wpforms - 8 CVEs
Yi Technology - 8 CVEs
Ansible - 7 CVEs
Ceph - 7 CVEs
Comments - 7 CVEs
Dokan Ai Powered Woocommerce Multivendor Marketplace Solution - 7 CVEs
Ecommerce - 7 CVEs
Email - 7 CVEs
Estatik Real Estate Plugin - 7 CVEs
Eventprime - 7 CVEs
Gdpr Cookie Compliance - 7 CVEs
Himer - 7 CVEs
Import And Export Users And Customers - 7 CVEs
Mappress Maps For Wordpress - 7 CVEs
Miniorange 2fa - 7 CVEs
Nex-forms - 7 CVEs
Paid Membership Plugin - 7 CVEs
Photo Gallery By 10web Mobile-friendly Image Gallery - 7 CVEs
Powerpress Podcasting Plugin By Blubrry - 7 CVEs
Simple Download Monitor - 7 CVEs
Simple File List - 7 CVEs
Unlimited Elements For Elementor - 7 CVEs
User Profile Restrict Content - 7 CVEs
User Registration - 7 CVEs
User Registration Form - 7 CVEs
Visual Form Builder - 7 CVEs
Wp Maps - 7 CVEs
Wp Multitasking - 7 CVEs
Wplp Cookie Consent - 7 CVEs
Wpqa Builder - 7 CVEs
Yop Poll - 7 CVEs
389-ds-base - 6 CVEs
Ajax Search Lite - 6 CVEs
Appointment Booking Plugin - 6 CVEs
Bit Form - 6 CVEs
Blog2social Social Media Auto Post Scheduler - 6 CVEs
Booking Calendar - 6 CVEs
Booking Package - 6 CVEs
Download Monitor - 6 CVEs
Easy Forms For Mailchimp - 6 CVEs
Envira Gallery - 6 CVEs
Event Booking Manager For Woocommerce - 6 CVEs
Forms - 6 CVEs
Gamipress - 6 CVEs
Giveaways And Contests By Rafflepress - 6 CVEs
Givewp Donation Plugin And Fundraising Platform - 6 CVEs
Image Photo Gallery Final Tiles Grid - 6 CVEs
Keycloak - 6 CVEs
Newsletter Popup - 6 CVEs
Otter Blocks - 6 CVEs
Page Builder Pagelayer - 6 CVEs
Paid Membership Subscriptions - 6 CVEs
Popup Builder - 6 CVEs
Popup Maker - 6 CVEs
Procps-ng - 6 CVEs
Prosolution Wp Client - 6 CVEs
Request A Quote - 6 CVEs
Schema Structured Data For Wp Amp - 6 CVEs
Site Reviews - 6 CVEs
Slider By 10web - 6 CVEs
Sms - 6 CVEs
Sureforms - 6 CVEs
Transposh Wordpress Translation - 6 CVEs
Ultimate Member - 6 CVEs
User Frontend - 6 CVEs
Woocommerce Customers Manager - 6 CVEs
Wordpress File Upload - 6 CVEs
Wp 2fa - 6 CVEs
Wp Crowdfunding - 6 CVEs
Wp Fastest Cache - 6 CVEs
Wp Travel - 6 CVEs
Wpb-show-core - 6 CVEs
Wpforo Forum - 6 CVEs
Academy Lms - 5 CVEs
Activitypub - 5 CVEs
Admin And Site Enhancements Ase - 5 CVEs
Advanced Booking Calendar - 5 CVEs
Advanced Custom Fields Extended Pro - 5 CVEs
Amelia Events Appointments Booking Calendar - 5 CVEs
Backup - 5 CVEs
Backwpup - 5 CVEs
Bold Page Builder - 5 CVEs
Booster Elite For Woocommerce - 5 CVEs
Booster Plus For Woocommerce - 5 CVEs
Business Card - 5 CVEs
Check Log Email - 5 CVEs
Classified Listing - 5 CVEs
Custom Content Shortcode - 5 CVEs
Customer Reviews For Woocommerce - 5 CVEs
Document Gallery - 5 CVEs
Dpdk - 5 CVEs
Email Subscribers By Icegram Express - 5 CVEs
Events Made Easy - 5 CVEs
Everest Forms - 5 CVEs
Export All Urls - 5 CVEs
Export Any Wordpress Data To Xmlcsv - 5 CVEs
Fancy Product Designer - 5 CVEs
File Manager Pro - 5 CVEs
Floating Notification Bar - 5 CVEs
Fluentboards - 5 CVEs
Import Any Xml Or Csv File To Wordpress - 5 CVEs
Jetpack - 5 CVEs
Js Help Desk - 5 CVEs
King Addons For Elementor - 5 CVEs
Litespeed Cache - 5 CVEs
Mailchimp For Woocommerce - 5 CVEs
Migration Staging - 5 CVEs
Motors - 5 CVEs
Multiparcels Shipping For Woocommerce - 5 CVEs
Multivendorx - 5 CVEs
Paid Memberships Pro - 5 CVEs
Pods - 5 CVEs
Procps - 5 CVEs
Pz-linkcard - 5 CVEs
Quiz Maker - 5 CVEs
Rox Appointment Booking - 5 CVEs
Secure Copy Content Protection And Content Locking - 5 CVEs
Seopress - 5 CVEs
Simple 301 Redirects By Betterlinks - 5 CVEs
Sp Project Document Manager - 5 CVEs
Sticky Menu On Scroll - 5 CVEs
Store Locator Wordpress - 5 CVEs
Subscriptions For Woocommerce - 5 CVEs
Supportcandy - 5 CVEs
Supportcandy Helpdesk Support Ticket System - 5 CVEs
Svg Support - 5 CVEs
Team Members - 5 CVEs
Telegram Chat - 5 CVEs
Timetable And Event Schedule By Motopress - 5 CVEs
Ultimate Blocks - 5 CVEs
Url Shortify - 5 CVEs
User Activity Log - 5 CVEs
Visualizer - 5 CVEs
Wallet System For Woocommerce - 5 CVEs
Wechat - 5 CVEs
Workreap - 5 CVEs
Wp All Export Pro - 5 CVEs
Wp Customer Area - 5 CVEs
Wp Data Access - 5 CVEs
Wp Mail Log - 5 CVEs
Wp Recipe Maker - 5 CVEs
Wp Ulike - 5 CVEs
Wp Ultimate Review - 5 CVEs
Wp Visitor Statistics Real Time Traffic - 5 CVEs
Wpbot - 5 CVEs
Wpvivid Backup - 5 CVEs
- 4 CVEs
Accept Donations With Paypal - 4 CVEs
Advanced File Manager - 4 CVEs
Affiliates Manager - 4 CVEs
Ajax Load More - 4 CVEs
All-in-one Security Aios - 4 CVEs
All In One Seo - 4 CVEs
And Sticky Header For Any Theme - 4 CVEs
Announcement Banner - 4 CVEs
Asgaros Forum - 4 CVEs
Ask Me - 4 CVEs
Awesome Support - 4 CVEs
Booking Manager - 4 CVEs
Brizy - 4 CVEs
Buddypress And Bbpress - 4 CVEs
Calculated Fields Form - 4 CVEs
Call Button - 4 CVEs
Carousel Slider - 4 CVEs
Chatbot With Chatgpt Wordpress - 4 CVEs
Clearfy Cache - 4 CVEs
Cm Download Manager - 4 CVEs
Cmp - 4 CVEs
Discy - 4 CVEs
Duplicator - 4 CVEs
Easy Digital Downloads - 4 CVEs
Easy Property Listings - 4 CVEs
Eazydocs - 4 CVEs
Ecs - 4 CVEs
Essential Real Estate - 4 CVEs
Event Tickets And Registration - 4 CVEs
Fileorganizer - 4 CVEs
Five Star Restaurant Reservations - 4 CVEs
Floating Chat Widget Contact Chat Icons - 4 CVEs
Fluent Forms - 4 CVEs
Fluentcart A New Era Of Ecommerce - 4 CVEs
Frontend Admin By Dynamiapps - 4 CVEs
Funnelkit - 4 CVEs
Gallery - 4 CVEs
Gnutls - 4 CVEs
Greenshift - 4 CVEs
Herd Effects - 4 CVEs
Hostel - 4 CVEs
Icegram Engage - 4 CVEs
Illi Link Party - 4 CVEs
Images - 4 CVEs
Infility Global - 4 CVEs
Inline Related Posts - 4 CVEs
Insert Or Embed Articulate Content Into Wordpress - 4 CVEs
Jetengine - 4 CVEs
Learnpress Wordpress Lms Plugin - 4 CVEs
Loco Translate - 4 CVEs
Login Register Forms - 4 CVEs
Ltl Freight Quotes - 4 CVEs
Mb Custom Post Types Custom Taxonomies - 4 CVEs
Media Library Assistant - 4 CVEs
Metform - 4 CVEs
Migration - 4 CVEs
Mobile Friendly Marketing Popups. - 4 CVEs
Mycred - 4 CVEs
Nested Pages - 4 CVEs
Nextscripts Social Networks Auto-poster - 4 CVEs
Online Scheduling And Appointment Booking System - 4 CVEs
Payment Plugins For Paypal Woocommerce - 4 CVEs
Paymob For Woocommerce - 4 CVEs
Pki-core - 4 CVEs
Podlove Podcast Publisher - 4 CVEs
Popup Builder Create Highly Converting - 4 CVEs
Post Smtp Mailer - 4 CVEs
Postx Gutenberg Blocks For Post Grid - 4 CVEs
Product Enquiry For Woocommerce - 4 CVEs
Really Simple Security - 4 CVEs
Responsive Lightbox Gallery - 4 CVEs
Robo Gallery - 4 CVEs
Royal Mcp - 4 CVEs
Rtmedia For Wordpress - 4 CVEs
Sendpress Newsletters - 4 CVEs
Sensei Lms - 4 CVEs
Seraphinite Accelerator - 4 CVEs
Shared Files - 4 CVEs
Sign-up Sheets - 4 CVEs
Simple Banner - 4 CVEs
Simply Schedule Appointments - 4 CVEs
Slider In Rbs Image Gallery - 4 CVEs
Smart Forms - 4 CVEs
Smash Balloon Social Post Feed - 4 CVEs
Sms Alert - 4 CVEs
Social Media Share Buttons Social Sharing Icons - 4 CVEs
Social Share - 4 CVEs
Socialdriver-framework - 4 CVEs
Solace Extra - 4 CVEs
Spam Protection - 4 CVEs
Stop Spammers Security Block Spam Users - 4 CVEs
Stripe Payment Forms By Wp Full Pay - 4 CVEs
Stylish Price List - 4 CVEs
Sully - 4 CVEs
Sunshine Photo Cart - 4 CVEs
The Plus Addons For Elementor Page Builder - 4 CVEs
Themify Portfolio Post - 4 CVEs
Tourmaster - 4 CVEs
Translate Wordpress With Gtranslate - 4 CVEs
Ultimate Dashboard - 4 CVEs
Updraftplus Wordpress Backup Plugin - 4 CVEs
User Profile - 4 CVEs
Wholesale Market For Woocommerce - 4 CVEs
Wp Erp Complete Hr Solution With Recruitment Job Listings Woocommerce Crm Accounting - 4 CVEs
Wp Google Review Slider - 4 CVEs
Wp Job Portal - 4 CVEs
Wp Jobsearch - 4 CVEs
Wp Meta Seo - 4 CVEs
Wp Oauth Server Oauth Authentication - 4 CVEs
Wp Prayer - 4 CVEs
Wp Staging Wordpress Backup Plugin - 4 CVEs
Wp Statistics - 4 CVEs
Wp Travel Engine - 4 CVEs
Wp Vr - 4 CVEs
Wpcargo Track Trace - 4 CVEs
Wpcode - 4 CVEs
Wpfunnels - 4 CVEs
Wpvr - 4 CVEs
10web Booster - 3 CVEs
Accept Stripe Payments - 3 CVEs
Adrotate Ad Manager Adsense Ads - 3 CVEs
Advanced-customized-prompts - 3 CVEs
Advanced Custom Fields Pro - 3 CVEs
Advanced Database Cleaner - 3 CVEs
Affiliate-toolkit - 3 CVEs
All-in-one Floating Contact Form - 3 CVEs
All-in-one Wp Migration And Backup - 3 CVEs
And Carousel By Metaslider - 3 CVEs
Anti-malware Security And Brute-force Firewall - 3 CVEs
Anycomment - 3 CVEs
Appointment Booking Calendar Plugin And Scheduling Plugin - 3 CVEs
Appointment Booking Calendar Simply Schedule Appointments Booking Plugin - 3 CVEs
Appointment Hour Booking Wordpress Booking Plugin - 3 CVEs
Arforms - Premium Wordpress Form Builder Plugin - 3 CVEs
Artplacer Widget - 3 CVEs
Atomic-openshift - 3 CVEs
Autoblogging - 3 CVEs
Backup Migration - 3 CVEs
Badges Loyalty Plugin - 3 CVEs
Base64 Encoderdecoder - 3 CVEs
Bear - 3 CVEs
Block Bad Bots And Stop Bad Bots Crawlers And Spiders And Anti Spam Protection - 3 CVEs
Bookit Booking Appointment Calendar - 3 CVEs
Brave - 3 CVEs
Breeze Cache - 3 CVEs
Broken Link Checker - 3 CVEs
Buddyboss-platform - 3 CVEs
Bulk Me Now - 3 CVEs
Call - 3 CVEs
Carousel - 3 CVEs
Category Posts Widget - 3 CVEs
Cfme - 3 CVEs
Chat - 3 CVEs
Clean Login - 3 CVEs
Click N Chat Chat Widget Integration - 3 CVEs
Clock In Portal- Staff Attendance Management - 3 CVEs
Code Snippets - 3 CVEs
Coming Soon And Maintenance Mode - 3 CVEs
Community Events - 3 CVEs
Compact Wp Audio Player - 3 CVEs
Connections Business Directory - 3 CVEs
Contact Form - 3 CVEs
Contact Form 7 Captcha - 3 CVEs
Contact Form Lead Form Elementor Builder - 3 CVEs
Content Mask - 3 CVEs
Content Restriction - 3 CVEs
Contentlock - 3 CVEs
Cookie Consent - 3 CVEs
Cookie Notice - 3 CVEs
Cost Calculator - 3 CVEs
Court Reservation - 3 CVEs
Custom Fonts More - 3 CVEs
Database For Contact Form 7 - 3 CVEs
Directorist - 3 CVEs
Directorist Wordpress Business Directory Plugin With Classified Ads Listings - 3 CVEs
Dologin Security - 3 CVEs
Duplicate Post - 3 CVEs
Dyn Business Panel - 3 CVEs
Easy Digital Downloads Simple Ecommerce For Selling Digital Files - 3 CVEs
Easy Table Of Contents - 3 CVEs
Ekc Tournament Manager - 3 CVEs
Elementor Forms - 3 CVEs
Email Encoder - 3 CVEs
Email Marketing And Subscribe Forms By Sendinblue - 3 CVEs
Enable Media Replace - 3 CVEs
Enl Newsletter - 3 CVEs
Error Log Viewer By Bestwebsoft - 3 CVEs
Ewww Image Optimizer - 3 CVEs
Featured Image From Url Fifu - 3 CVEs
Fl3r Feelbox - 3 CVEs
Float Menu - 3 CVEs
Form Maker By 10web Mobile-friendly Drag Drop Contact Form Builder - 3 CVEs
Formcraft - 3 CVEs
Forminator - 3 CVEs
Gallery By Wp Carousel - 3 CVEs
Gamification - 3 CVEs
Geo My Wp - 3 CVEs
Gigpress - 3 CVEs
Golang - 3 CVEs
Gutenberg Blocks With Ai By Kadence Wp - 3 CVEs
Gutenkit - 3 CVEs
Gutentor - 3 CVEs
Hel Online Classroom Ai-powered Online Classrooms - 3 CVEs
Hide My Wp Ghost - 3 CVEs
Hl Twitter - 3 CVEs
Html2wp - 3 CVEs
Html Forms - 3 CVEs
Hydra Booking Appointment Scheduling Booking Calendar - 3 CVEs
Icegram Express - 3 CVEs
If-so Dynamic Content - 3 CVEs
If-so Dynamic Content Personalization - 3 CVEs
Insert Pages - 3 CVEs
Ip2location Country Blocker - 3 CVEs
Jetbackup - 3 CVEs
Jetformbuilder Dynamic Blocks Form Builder - 3 CVEs
Kali Forms Contact Form Drag-and-drop Builder - 3 CVEs
Kkprogressbar2 Free - 3 CVEs
Letsrecover - 3 CVEs
Lifterlms - 3 CVEs
Like Button Rating Likebtn - 3 CVEs
Limit Login Attempts - 3 CVEs
Line Messenger - 3 CVEs
Logo Showcase With Slick Slider Logo Carousel - 3 CVEs
Logo Slider Logo Grid - 3 CVEs
Magee Shortcodes - 3 CVEs
Maps Plugin Using Google Maps For Wordpress Wp Google Map - 3 CVEs
Master Slider - 3 CVEs
Mcp Server For Wordpress - 3 CVEs
Menu Icons - 3 CVEs
Meow Gallery - 3 CVEs
Mf Gig Calendar - 3 CVEs
Mobile Builder - 3 CVEs
Mobile Events Manager - 3 CVEs
Modern Event Calendar Pro - 3 CVEs
Monsterinsights - 3 CVEs
Motopress Hotel Booking - 3 CVEs
Mpg - 3 CVEs
Music Request Manager - 3 CVEs
Mycred Points - 3 CVEs
Nexi Xpay Build - 3 CVEs
Nginx - 3 CVEs
Ninja Forms Contact Form - 3 CVEs
Noo Jobmonster - 3 CVEs
Note Press - 3 CVEs
Ocean Extra - 3 CVEs
Omgf Host Google Fonts Locally - 3 CVEs
Openstack-mistral - 3 CVEs
Optimole - 3 CVEs
Orbit Fox By Themeisle - 3 CVEs
Orbit Fox Duplicate Page - 3 CVEs
Order Delivery Date - 3 CVEs
Page Builder Gutenberg Blocks - 3 CVEs
Page View Count - 3 CVEs
Payments For Hubtel - 3 CVEs
Payplus Payment Gateway - 3 CVEs
Paytm Payment Gateway - 3 CVEs
Pdns - 3 CVEs
Pinpoint Booking System - 3 CVEs
Poll Maker - 3 CVEs
Project Manager - 3 CVEs
Qemu - 3 CVEs
Qi Blocks - 3 CVEs
Ranks - 3 CVEs
Redirection For Contact Form 7 - 3 CVEs
Registrations For The Events Calendar Event Registration Plugin - 3 CVEs
Relevanssi - 3 CVEs
Resmush.it The Only Free Image Optimizer Compress Plugin - 3 CVEs
Responsive Gallery Grid - 3 CVEs
Rewards - 3 CVEs
Rkt - 3 CVEs
Sailthru Triggermail - 3 CVEs
Seriously Simple Podcasting - 3 CVEs
Shared-files-pro - 3 CVEs
Simple Ajax Chat - 3 CVEs
Simple Basic Contact Form - 3 CVEs
Simple Giveaways - 3 CVEs
Simple Job Board - 3 CVEs

Newest CVEs of Unknown

CVE-2026-115223 - CVSS 4.9 (medium), 2026-10-28: The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later…
CVE-2026-110508 - CVSS 5.3 (medium), 2026-10-28: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its…
CVE-2026-106648 - CVSS 5.3 (medium), 2026-10-28: The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient…
CVE-2026-103330 - CVSS 5.3 (medium), 2026-10-28: The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed…
CVE-2026-103313 - CVSS 5.3 (medium), 2026-10-28: The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor…
CVE-2026-115225 - CVSS 5.8 (medium), 2026-10-28: The Customer Engagement System WordPress plugin before 2.0.2 does not restrict access to its MailChimp interest-group lookup or validate the API key supplied…
CVE-2026-115281 - CVSS 6.8 (medium), 2026-10-28: The Recipe Card Blocks Lite WordPress plugin before 3.6.4 does not sanitize and cast a block and shortcode attribute before concatenating it into SQL queries,…
CVE-2026-115255 - CVSS 5.3 (medium), 2026-10-28: The WP Roster WordPress plugin before 2.35 does not perform any capability or nonce checks on one of its AJAX actions, allowing unauthenticated attackers to…
CVE-2026-115224 - CVSS 4.1 (medium), 2026-10-28: The Customer Engagement System WordPress plugin before 2.0.2 does not safely build the SQL statements that store a popup's page and category visibility rules,…
CVE-2026-113488 - CVSS 6.8 (medium), 2026-10-28: The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode attribute for a JavaScript context before placing it in an…
CVE-2026-113494 - CVSS 2.7 (low), 2026-10-28: The GeoDirectory WordPress plugin before 2.8.195 does not perform any status or ownership check when rendering a listing referenced by an id attribute in its…
CVE-2026-113813 - CVSS 6.5 (medium), 2026-10-28: The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability or ownership check on a set of unauthenticated AJAX…
CVE-2026-113487 - CVSS 6.8 (medium), 2026-10-28: The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge click-through link value before outputting it in an anchor…
CVE-2026-113485 - CVSS 6.5 (medium), 2026-10-28: The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF nonce on the Media Library bulk-action handler, checking the…
CVE-2026-113486 - CVSS 6.5 (medium), 2026-10-28: The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty Trash media action, so a forged cross-site request can…
CVE-2026-111967 - CVSS 6.8 (medium), 2026-10-28: The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode attributes before outputting it into an HTML attribute,…
CVE-2026-111960 - CVSS 4.3 (medium), 2026-10-28: The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisation checks in one of its search tools, allowing…
CVE-2026-111961 - CVSS 3.8 (low), 2026-10-28: The Royal MCP WordPress plugin before 1.5.10 does not perform an object-level permission check before duplicating a requested page, relying on a generic…
CVE-2026-111021 - CVSS 7.1 (high), 2026-10-28: The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an…
CVE-2026-111577 - CVSS 7.2 (high), 2026-10-28: The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check on its SMTP configuration page, which is gated only on the…
CVE-2026-111027 - CVSS 6.8 (medium), 2026-10-28: The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parameter before using it in a SQL query, and strips the…
CVE-2026-111031 - CVSS 4.7 (medium), 2026-10-28: The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before using it in a redirect, allowing unauthenticated attackers…
CVE-2026-111032 - CVSS 3.8 (low), 2026-10-28: The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against the targeted product before processing SKU changes,…
CVE-2026-110524 - CVSS 6.8 (medium), 2026-10-28: The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and escape a shortcode attribute before storing it and writing it…
CVE-2026-110509 - CVSS 5.3 (medium), 2026-10-28: The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or meta query an unauthenticated visitor can pass to its…
CVE-2026-110506 - CVSS 6.8 (medium), 2026-10-28: The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget property before storing it and outputting it in the page…
CVE-2026-110507 - CVSS 2.7 (low), 2026-10-28: The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments users can add to its Post Loop widget or limit the loop to…
CVE-2026-110691 - CVSS 6.5 (medium), 2026-10-28: The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce before updating its hidden-login URL settings, which could…
CVE-2026-110292 - CVSS 6.5 (medium), 2026-10-28: The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request,…
CVE-2026-107097 - CVSS 5.3 (medium), 2026-10-28: The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization check before using the site owner's stored Mailchimp…