Export limit exceeded: 414710 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (414710 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-13701 | 1 Wordpress-extensions | 1 Advanced Excerpt | 2026-11-11 | 4.8 Medium |
| The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators (including those without the unfiltered_html capability, such as on multisite) to perform Stored Cross-Site Scripting attacks that execute in the context of any visitor viewing affected pages. | ||||
| CVE-2026-14206 | 1 Wordpress-extensions | 1 Ht Contact Form | 2026-11-11 | 7.5 High |
| The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data (name, email, phone, address) stored in form drafts. | ||||
| CVE-2026-14860 | 1 Wordpress-extensions | 1 Podcast Player | 2026-11-11 | 5.3 Medium |
| The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to make the server issue requests to arbitrary hosts and read back responses that parse as RSS/XML. | ||||
| CVE-2026-14941 | 1 Wordpress-extensions | 1 Customer Reviews For Woocommerce | 2026-11-11 | 5.4 Medium |
| The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative settings handlers, update Customer Reviews for WooCommerce WordPress plugin before 5.116.0 options, and disclose store configuration. | ||||
| CVE-2026-16949 | 1 Wordpress-extensions | 1 Term Pages | 2026-11-11 | 5.8 Medium |
| The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks. | ||||
| CVE-2026-16985 | 1 Wordpress-extensions | 1 Squeeze | 2026-11-11 | 8.8 High |
| The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the upload_files capability (Author and above) to write an executable PHP file into the uploads directory and achieve remote code execution. | ||||
| CVE-2026-18934 | 1 Wordpress-extensions | 1 Rss Aggregator By Feedzy | 2026-11-11 | 5.5 Medium |
| The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the request, allowing users with author-level access and above to permanently delete the posts created by another user's import job, reset its deduplication and scheduling state, disable it, or clear its error log. One of the affected actions performs no object-type check either, so arbitrary posts and pages can also be unpublished regardless of who owns them. | ||||
| CVE-2026-18946 | 1 Wordpress-extensions | 1 Contact Form To Any Api | 2026-11-11 | 7.5 High |
| The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded through contact forms into a publicly accessible directory, allowing unauthenticated attackers to enumerate and download files submitted by other users. | ||||
| CVE-2026-107509 | 2026-11-11 | 6.5 Medium | ||
| A user with the Viewer role can make Grafana allocate an unbounded amount of memory, and crash it, with a single SQL Expression query that casts a value to a very large BINARY length (memory allocation with excessive size value). | ||||
| CVE-2026-18960 | 1 Wordpress-extensions | 1 Block User Account | 2026-11-11 | 5.4 Medium |
| The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read and write access through the REST API. | ||||
| CVE-2026-14293 | 1 Wordpress-extensions | 1 Autopay | 2026-11-11 | 8.8 High |
| The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when it is later output on the checkout page, allowing unauthenticated attackers to store JavaScript that executes in the browser of any user, including administrators, who loads the checkout page. | ||||
| CVE-2026-18200 | 1 Wordpress-extensions | 1 Foodboxbooker | 2026-11-11 | 4.3 Medium |
| The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators. | ||||
| CVE-2026-18786 | 1 Wordpress-extensions | 1 Checkview | 2026-11-11 | 8.8 High |
| The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible for unauthenticated attackers to bypass the REST nonce check and perform any REST action available to a logged-in administrator, such as creating a new administrator account, via a crafted link an administrator is tricked into opening. | ||||
| CVE-2026-13612 | 1 Wordpress-extensions | 1 Kivicare | 2026-11-11 | 4.3 Medium |
| The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details. | ||||
| CVE-2026-13613 | 1 Wordpress-extensions | 1 Kivicare | 2026-11-11 | 8.8 High |
| The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection. | ||||
| CVE-2026-14857 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers to alter other users' campaigns. | ||||
| CVE-2026-14858 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every order in the store. | ||||
| CVE-2026-14859 | 1 Wordpress-extensions | 1 Wp Crowdfunding | 2026-11-11 | 4.3 Medium |
| The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers to create crowdfunding campaign posts despite not being granted that permission. | ||||
| CVE-2026-110992 | 2026-11-11 | 6.5 Medium | ||
| A user who can create Git Sync provisioning jobs (the Editor role by default) could delete or move files outside the configured repository path with a job that references a resource whose source path contains ../ sequences (path traversal). With a local filesystem repository on versions before 13.0.4 and 13.1.1, this reached files on the Grafana host. | ||||
| CVE-2026-14925 | 1 Wordpress-extensions | 1 Import Wp | 2026-11-11 | 7.5 High |
| The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file download handlers, allowing unauthenticated attackers to download export files generated by administrators, which may contain user personal data such as email addresses, login names and roles. Exploitation requires an unconsumed export to already exist and a low-entropy, time-based download key to be obtained. | ||||