Export limit exceeded: 424359 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 424359 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (424359 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-81426 | 1 Wordpress-extensions | 1 Wc Vendors | 2026-11-11 | 4.3 Medium |
| The WC Vendors WordPress plugin before 2.7.2.1 does not have CSRF protection on some of its front-end order shipment status actions, which could allow attackers to make a logged-in vendor change the shipment status of their own orders via a crafted request. | ||||
| CVE-2026-81427 | 1 Wordpress-extensions | 1 Wc Vendors | 2026-11-11 | 4.3 Medium |
| The WC Vendors WordPress plugin before 2.7.2.1 does not verify that the vendor submitting a front-end order shipment status change owns the referenced order, allowing any authenticated vendor to mark another vendor's order as shipped, add an order note falsely attributed to the victim vendor, and trigger the customer shipment notification email. | ||||
| CVE-2026-81428 | 1 Wordpress-extensions | 1 Wc Vendors | 2026-11-11 | 6.5 Medium |
| The WC Vendors WordPress plugin before 2.7.2.1 does not verify ownership or the object type of user-supplied IDs when saving product variations, allowing authenticated users with the vendor role to modify product variations belonging to other vendors, and to change the status and title of arbitrary posts, via IDOR. | ||||
| CVE-2026-81432 | 1 Wordpress-extensions | 1 Jetstylemanager | 2026-11-11 | 4.3 Medium |
| The JetStyleManager for Gutenberg WordPress plugin before 1.3.9 does not have CSRF protection on some of its AJAX actions, allowing attackers to make a logged-in user with the edit_posts capability (Contributor and above) delete or modify custom widget skins via a crafted request, provided they can trick the user into performing an action such as clicking a link. | ||||
| CVE-2026-81583 | 1 Wordpress-extensions | 1 Theme My Login | 2026-11-11 | 5.4 Medium |
| The My Login WordPress plugin before 7.2.0 does not enforce the network's registration setting when processing site signups on multisite installations, allowing users with a subscriber account, and unauthenticated users on some networks, to create new sites and be granted administrator over them. | ||||
| CVE-2026-81737 | 1 Wordpress-extensions | 1 Faq Builder Ays | 2026-11-11 | 8.8 High |
| The FAQ Builder AYS WordPress plugin before 1.8.5 does not sanitize or escape content submitted by unauthenticated visitors before storing it and outputting it in an admin area page, and the escaping it does apply is undone by a subsequent decoding step, leading to Stored XSS which will execute in the context of a logged in administrator. | ||||
| CVE-2026-81807 | 1 Wordpress-extensions | 1 Simple Ajax Chat | 2026-11-11 | 8.8 High |
| The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes into the page and run scripts in the browser of anyone viewing the chat, including administrators. | ||||
| CVE-2026-82183 | 1 Wordpress-extensions | 1 Oauth Single Sign On | 2026-11-11 | 8.1 High |
| The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts. | ||||
| CVE-2026-10821 | 1 Wordpress-extensions | 1 Yoast Seo Premium | 2026-11-11 | 6.6 Medium |
| The Yoast SEO Premium WordPress plugin before 27.6.1 does not sanitize control characters from redirect origins before writing them to the site's Apache configuration file when the file-based redirect mode is enabled, and the redirect-creation endpoint is reachable by users with only Author-level access. This allows such users to inject arbitrary newline-delimited Apache directives into the root .htaccess file. On Apache servers that honour PHP directives, the injection can be chained with the user's own media upload (a polyglot image carrying a PHP payload) and an auto_prepend_file directive to achieve Remote Code Execution. | ||||
| CVE-2026-17563 | 1 Wordpress-extensions | 1 User Frontend | 2026-11-11 | 5.3 Medium |
| The User Frontend WordPress plugin before 4.3.11 does not enforce its subscription-purchase requirement when processing frontend post submissions, only when rendering the form, allowing unauthenticated users to create and, depending on the form's configuration, immediately publish posts through forms restricted to paying subscribers. | ||||
| CVE-2026-19698 | 1 Wordpress-extensions | 1 Gutenkit | 2026-11-11 | 3.5 Low |
| The GutenKit WordPress plugin before 2.5.1 does not validate or escape style settings saved against a post before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbitrary CSS into pages served to other users and to anonymous visitors. JavaScript execution is not possible at that role, so the impact is limited to defacement, interface redressing and forcing external resources to load. | ||||
| CVE-2026-2688 | 1 Wordpress-extensions | 1 Cm Hipaa Forms | 2026-11-11 | 6.5 Medium |
| The HIPAA FORMS WordPress plugin before 3.2.0 contains a hardcoded authentication bypass via a hardcoded parameter alongside all AJAX requests. The server explicitly checks for this value to skip nonce validation entirely. This allows unauthenticated attackers to access protected AJAX endpoints. | ||||
| CVE-2026-4357 | 1 Wordpress-extensions | 1 Embed Html5 Game | 2026-11-11 | 10 Critical |
| The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites. | ||||
| CVE-2026-77009 | 1 Wordpress-extensions | 1 Watchman Site7 | 2026-11-11 | 9.9 Critical |
| The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server. | ||||
| CVE-2026-78153 | 1 Wordpress-extensions | 1 Restrict User Access | 2026-11-11 | 5.3 Medium |
| The Restrict User Access WordPress plugin before 2.8.1 does not normalise the REST API route before checking it against the routes its content protection covers, allowing unauthenticated users to bypass that protection and read restricted content and enumerate users. | ||||
| CVE-2026-83533 | 1 Wordpress-extensions | 1 Wp Express Checkout | 2026-11-11 | 5.3 Medium |
| The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying. | ||||
| CVE-2026-83547 | 1 Wordpress-extensions | 1 Xpro Elementor Addons | 2026-11-11 | 6.8 Medium |
| The Xpro Addons WordPress plugin before 1.7.4 does not properly escape some of its widgets' settings before outputting them within HTML attributes, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2023-3360 | 1 Wordpress-extensions | 1 Weaver Show Posts | 2026-11-11 | 3.3 Low |
| The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import a malicious file and a suitable gadget chain is present on the blog. | ||||
| CVE-2024-3773 | 1 Wordpress-extensions | 1 Livejournal Shortcode | 2026-11-11 | 5.9 Medium |
| The LiveJournal Shortcode WordPress plugin through 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks | ||||
| CVE-2025-15481 | 1 Wordpress-extensions | 1 Notification Bar For Wordpress | 2026-11-11 | 5.3 Medium |
| The Notification Bar for WordPress plugin through 1.1.8 exposes an unauthenticated CSV export script that discloses all stored subscriber emails. | ||||