Export limit exceeded: 414589 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 414589 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414589 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-18395 | 1 Wordpress-extensions | 1 Child Pages Card | 2026-11-11 | 5.4 Medium |
| The Child Pages Card WordPress plugin before 1.09 does not sanitise and escape some of its shortcode attributes before outputting them back in a page, allowing users with the contributor role and above to perform Stored Cross-Site Scripting attacks. | ||||
| CVE-2026-16537 | 1 Wordpress-extensions | 1 Slick Slider | 2026-11-11 | 5.4 Medium |
| The Slick Slider WordPress plugin before 0.5.3 does not sanitize and escape a shortcode attribute value before outputting it in an HTML attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute when a user views the affected post. | ||||
| CVE-2026-15246 | 1 Wordpress-extensions | 1 Realhomes Memberships | 2026-11-11 | 4.3 Medium |
| The RealHomes Memberships WordPress plugin before 3.1.0 does not verify that a membership payment actually completed, nor check a nonce or the user's capability, before granting a paid membership package, allowing any authenticated user such as a Subscriber to obtain paid membership packages without paying. | ||||
| CVE-2026-66457 | 2 Pixelite, Wordpress-extensions | 2 Events Manager, Events Manager | 2026-11-11 | 7.1 High |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects Events Manager: from n/a through 7.4.2. | ||||
| CVE-2026-3430 | 1 Wordpress-extensions | 1 Creative Mail | 2026-11-11 | 8.6 High |
| The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail. | ||||
| CVE-2026-5336 | 1 Wordpress-extensions | 1 Dataverse Integration | 2026-11-11 | 6.8 Medium |
| The DataPress (Dataverse Integration) WordPress plugin before 2.91 does not properly restrict access to its template rendering feature and exposes the viewing user's data to it, allowing users with a role as low as Contributor to disclose sensitive information, such as the session cookies of higher privileged users who view the affected content. | ||||
| CVE-2026-10599 | 1 Wordpress-extensions | 1 Integrate Phonepe With Woocommerce | 2026-11-11 | 7.5 High |
| The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to the order being marked as paid, nor does it verify the authenticity of its payment-completion request, allowing unauthenticated attackers to reuse a single valid transaction to mark arbitrary orders as paid and bypass payment. | ||||
| CVE-2026-14812 | 1 Wordpress-extensions | 1 Premium Seo | 2026-11-11 | 10 Critical |
| The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site. | ||||
| CVE-2026-14842 | 1 Wordpress-extensions | 1 Events Made Easy | 2026-11-11 | 5.3 Medium |
| The Events Made Easy WordPress plugin before 3.1.2 does not bind the payment authorization token to the payment record being charged, allowing unauthenticated attackers to pay a low amount for a cheap booking and have a separate, higher-priced booking marked as fully paid. | ||||
| CVE-2026-12501 | 1 Wordpress-extensions | 1 Wp Travel Engine | 2026-11-11 | 5.3 Medium |
| The WP Travel Engine WordPress plugin before 6.8.2 does not verify that an incoming PayPal payment notification was sent to the site's configured merchant account, nor that the paid amount matches the order total, before marking a booking as paid, allowing unauthenticated attackers to mark bookings as fully paid using a token payment made to an attacker-controlled account. | ||||
| CVE-2026-12901 | 1 Wordpress-extensions | 1 Getpaid | 2026-11-11 | 5.9 Medium |
| The GetPaid WordPress plugin before 2.8.55 does not verify the authenticity of incoming Worldpay payment notifications, allowing unauthenticated attackers to forge a notification that marks a pending invoice as paid without any payment being made. | ||||
| CVE-2026-14831 | 1 Wordpress-extensions | 1 Easy Booking | 2026-11-11 | 5.3 Medium |
| The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place below-minimum bookings and complete underpriced orders. | ||||
| CVE-2026-10524 | 1 Wordpress-extensions | 1 Cocart | 2026-11-11 | 7.5 High |
| The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price when items are added to the cart through one of its public REST API endpoints, allowing unauthenticated users to set arbitrary product prices and complete WooCommerce orders at manipulated totals. | ||||
| CVE-2026-15147 | 1 Wordpress-extensions | 1 Five Star Restaurant Reservations | 2026-11-11 | 5.3 Medium |
| The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark arbitrary pending reservations as paid and confirmed. | ||||
| CVE-2026-13342 | 1 Wordpress-extensions | 1 Security Optimizer | 2026-11-11 | 5.3 Medium |
| The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate requests to its optional IP-based login restriction feature, allowing the restriction to be bypassed so that unauthenticated requests from non-allowlisted IP addresses can reach and use the login form, defeating the access control the administrator configured. | ||||
| CVE-2026-17032 | 1 Wordpress-extensions | 3 Google-maps-easy-pro, Supsystic-gallery-pro, Tables-generator-pro | 2026-11-11 | 9.8 Critical |
| Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites. | ||||
| CVE-2026-14943 | 1 Wordpress-extensions | 1 Password Protected | 2026-11-11 | 7.5 High |
| The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not restrict REST API access to authenticated users when a specific option is enabled, allowing unauthenticated visitors to bypass the sitewide password gate and read otherwise-protected content and account identifiers via the REST API. This re-introduces a previously-fixed issue (CVE-2024-0437), which was patched in 2.6.7 and regressed in 2.6.8. | ||||
| CVE-2026-15032 | 1 Wordpress-extensions | 1 Wpdiscuz | 2026-11-11 | 6.1 Medium |
| The Comments WordPress plugin before 7.6.60 does not properly escape a user-supplied URL before outputting it inside an HTML attribute, allowing unauthenticated users to store a Cross-Site Scripting payload that executes in the browser of any user, including administrators, who views the affected content. | ||||
| CVE-2026-15245 | 1 Wordpress-extensions | 1 Bne Testimonials | 2026-11-11 | 5.4 Medium |
| The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing the affected content. | ||||
| CVE-2026-15386 | 1 Wordpress-extensions | 1 Meow Gallery | 2026-11-11 | 5.4 Medium |
| The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked galleries, allowing users with the Author role or above to store a JavaScript payload that executes in the browser of any visitor (including administrators) who views a post containing such a gallery. | ||||