Export limit exceeded: 14514 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 14514 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (14514 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-11598 | 2 Lrnz, Wordpress | 2 Shortcodify, Wordpress | 2026-07-28 | 5 Medium |
| The Shortcodify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'name' Shortcode Attribute in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | ||||
| CVE-2026-14785 | 2 Mihail-chepovskiy, Wordpress | 2 Web Directory Free, Wordpress | 2026-07-28 | 7.5 High |
| The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the 'levels' parameter in all versions up to, and including, 1.7.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | ||||
| CVE-2026-13440 | 2 Wedevs, Wordpress | 2 Storegrowth – Upsell, Bogo, Quick View, Direct Checkout & Side Cart For Woocommerce, Wordpress | 2026-07-28 | 7.2 High |
| The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message_popup' parameter in all versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit is possible because the 'ajd_protected' nonce required by the create_popup handler is exposed to all unauthenticated frontend visitors via wp_localize_script under bogo_save_url.ajd_nonce, effectively bypassing the nonce-only access control. | ||||
| CVE-2026-15411 | 2 Wedevs, Wordpress | 2 Storegrowth – Upsell, Bogo, Quick View, Direct Checkout & Side Cart For Woocommerce, Wordpress | 2026-07-28 | 5.3 Medium |
| The StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the spsg_popup_products option with arbitrary attacker-controlled data. The 'ajd_protected' nonce used as the sole gate is exposed to unauthenticated visitors on every frontend page through the BoGo module's wp_localize_script call, rendering it ineffective as an authorization barrier. | ||||
| CVE-2026-13110 | 2 Wedevs, Wordpress | 2 Storegrowth – Upsell, Bogo, Quick View, Direct Checkout & Side Cart For Woocommerce, Wordpress | 2026-07-28 | 5.3 Medium |
| The Storegrowth Sales Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 2.1.0. This is due to a missing capability check on the bogo_category_msg_create() AJAX handler, which is registered for both authenticated (wp_ajax_) and unauthenticated (wp_ajax_nopriv_) users and only validates a nonce ('ajd_protected') that is emitted publicly via wp_localize_script() on every frontend page through front_scripts() . This makes it possible for unauthenticated attackers to modify the plugin's BOGO category-message configuration stored in the spsg_bogo_general_settings option by reading the nonce from any public page and POSTing attacker-controlled data to admin-ajax. | ||||
| CVE-2026-16811 | 2 Devitemsllc, Wordpress | 2 Shoplentor – All-in-one Woocommerce Growth & Store Enhancement Plugin, Wordpress | 2026-07-28 | 4.9 Medium |
| The ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. | ||||
| CVE-2026-65533 | 2 Wbolt, Wordpress | 2 Smart Seo Tool, Wordpress | 2026-07-28 | 6.5 Medium |
| Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions. | ||||
| CVE-2026-15100 | 2 Wordpress, Wpxpo | 2 Wordpress, Postx - Gutenberg Blocks For Post Grid | 2026-07-28 | 6.4 Medium |
| The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is particularly concerning in a cross-privilege scenario where a Contributor creates a pending or draft post containing the malicious block attribute, which then executes arbitrary JavaScript in the browser session of an Editor or Administrator who previews that post. | ||||
| CVE-2026-13152 | 2 Silverplugins217, Wordpress | 2 Custom Fields Account Registration For Woocommerce, Wordpress | 2026-07-28 | 8.1 High |
| The Custom Fields Account Registration For Woocommerce WordPress plugin before 1.4 does not prevent its custom registration fields from writing to the user capabilities meta key on sites that use a non-default database table prefix, so an unauthenticated user who registers an account can be granted the administrator role when a correspondingly named field has been configured. | ||||
| CVE-2026-13332 | 2 Masteriyo, Wordpress | 2 Masteriyo, Wordpress | 2026-07-28 | 9.1 Critical |
| The Masteriyo LMS WordPress plugin before 2.3.1 does not correctly verify authorization on an unauthenticated AJAX action used to clear user sessions, allowing unauthenticated attackers to terminate the active sessions (force-logout) of any user on the site, including administrators. | ||||
| CVE-2026-13390 | 2 Theeventscalendar, Wordpress | 2 The Events Calendar, Wordpress | 2026-07-28 | 5.3 Medium |
| The Events Calendar WordPress plugin before 6.16.5.1 does not perform an authorization check on one of its Event Aggregator import REST API routes and skips an integrity check for a particular status value, allowing unauthenticated attackers to mark existing import records as failed and to store arbitrary content in a hidden comment record. | ||||
| CVE-2026-14189 | 2 Wordpress, Wpbot | 2 Wordpress, Wpot | 2026-07-28 | 3.8 Low |
| The WPBot WordPress plugin before 8.5.2 does not validate administrator-configured field identifiers before using them in a SQL query, allowing users with administrator access to perform SQL injection that executes when a visitor triggers a search. | ||||
| CVE-2026-14190 | 2 Shaosina, Wordpress | 2 Sina Extension For Elementor, Wordpress | 2026-07-28 | 6.1 Medium |
| The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who triggers a crafted request. | ||||
| CVE-2026-14568 | 2 Wedevs, Wordpress | 2 User Frontend: Ai Powered Frontend Posting, User Directory, Profile, Membership & User Registration, Wordpress | 2026-07-28 | 6.5 Medium |
| The User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8 does not correctly verify ownership before deleting an attachment, allowing unauthenticated attackers to permanently delete author-less attachments such as guest uploads and User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration WordPress plugin before 4.3.8-installed placeholder media. | ||||
| CVE-2026-59532 | 2 Magepeople, Wordpress | 2 Booking & Rental Manager, Wordpress | 2026-07-28 | 7.5 High |
| Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions. | ||||
| CVE-2026-59550 | 2 Strategy11, Wordpress | 2 Awp Classifieds, Wordpress | 2026-07-28 | 9.3 Critical |
| Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions. | ||||
| CVE-2026-65568 | 2 Visualcomposer, Wordpress | 2 Visual Composer Website Builder, Wordpress | 2026-07-28 | 5 Medium |
| Contributor Broken Access Control in Visual Composer Website Builder <= 45.15.0 versions. | ||||
| CVE-2026-66438 | 2 Timstrifler, Wordpress | 2 Exclusive Addons For Elementor, Wordpress | 2026-07-28 | 5.3 Medium |
| Unauthenticated Sensitive Data Exposure in Exclusive Addons Elementor <= 2.8.0 versions. | ||||
| CVE-2026-61953 | 2 Quantumcloud, Wordpress | 2 Simple Link Directory, Wordpress | 2026-07-28 | 7.2 High |
| Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions. | ||||
| CVE-2026-61957 | 2 Miniorange, Wordpress | 2 Otp Verification, Wordpress | 2026-07-28 | 7.1 High |
| Unauthenticated Cross Site Scripting (XSS) in miniorange otp verification <= 5.5.1 versions. | ||||