Export limit exceeded: 223588 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (223588 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-15958 | 1 Wordpress-extensions | 1 Easy Dropbox Integration | 2026-11-11 | 9.3 Critical |
| The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the connected Dropbox account and to read the connected account and administrator email addresses. | ||||
| CVE-2026-16546 | 1 Wordpress-extensions | 1 Wired Impact Volunteer Management | 2026-11-11 | 4.3 Medium |
| The Wired Impact Volunteer Management WordPress plugin before 2.8.2 does not have authorisation checks in one of its AJAX actions, and does not verify that the RSVP being removed belongs to the requesting user, allowing users with a role as low as Subscriber to remove arbitrary users' RSVPs from any volunteer opportunity. | ||||
| CVE-2026-16561 | 1 Wordpress-extensions | 1 Sunshine Photo Cart | 2026-11-11 | 7.5 High |
| The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries. | ||||
| CVE-2026-16583 | 1 Wordpress-extensions | 1 Orbit Fox | 2026-11-11 | 6.1 Medium |
| The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files when its SVG upload feature is enabled, allowing authenticated users with the upload capability (Author and above by default, without the unfiltered_html capability) to upload SVG files containing JavaScript that executes in the site context when the file is viewed, leading to Stored Cross-Site Scripting. | ||||
| CVE-2026-16602 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 does not perform a post-status check before returning post content from an unauthenticated REST endpoint, allowing unauthenticated users to disclose the content of non-public (draft, private, and pending) posts on sites that have a captcha provider configured. | ||||
| CVE-2026-16603 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 does not enforce its category-based content protection on the WordPress REST API, allowing unauthenticated users to read the full content, title, and excerpt of category-locked posts through the core REST API. | ||||
| CVE-2026-16604 | 1 Wordpress-extensions | 1 Passster | 2026-11-11 | 7.5 High |
| The Passster WordPress plugin before 4.3.6 outputs password-protected block content in the public page response before verifying the password, allowing unauthenticated users to recover the protected content without knowing the password. | ||||
| CVE-2026-16613 | 1 Wordpress-extensions | 1 Gdpr Cookie Compliance | 2026-11-11 | 4.3 Medium |
| The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's cookies from an action that is reachable without authentication and performs no request-origin check, allowing an attacker to log any user out and delete the site's cookies by luring them to a crafted link. | ||||
| CVE-2026-16940 | 1 Wordpress-extensions | 1 Custom Fields | 2026-11-11 | 10 Critical |
| The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing unauthenticated users to delete arbitrary files on the server (such as wp-config.php), which can lead to a full site takeover. | ||||
| CVE-2026-16942 | 1 Wordpress-extensions | 1 Wp Custom Html Page | 2026-11-11 | 5.4 Medium |
| The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitise HTML stored through one of its custom page handlers, nor restrict it to users allowed to post unfiltered HTML, allowing users with the Author role to store JavaScript that is served unescaped at a public URL and executes for any visitor, including administrators. | ||||
| CVE-2026-16981 | 1 Wordpress-extensions | 1 Dhl For Woocommerce | 2026-11-11 | 5.3 Medium |
| The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not perform any authorization check (no capability, nonce, login, or ownership check) on one of its shipping-label download endpoints, so an unauthenticated attacker can enumerate sequential ids and download every stored shipping label, each containing the customer's full name, complete postal address, and order reference. | ||||
| CVE-2026-16993 | 1 Wordpress-extensions | 1 Dhl For Woocommerce | 2026-11-11 | 3.7 Low |
| The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 does not protect its shipping-label storage directory with server-independent access control, relying only on an Apache .htaccess file, so on a web server that does not honor .htaccess (such as nginx) an unauthenticated visitor can download stored shipping labels (each containing a customer's name and postal address) by requesting predictable filenames. | ||||
| CVE-2026-14553 | 1 Wordpress-extensions | 1 Zportals | 2026-11-11 | 8.1 High |
| The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied content type and preserving the original file extension, allowing any authenticated user (Subscriber or higher) to upload arbitrary PHP files and achieve remote code execution. | ||||
| CVE-2026-14313 | 1 Wordpress-extensions | 1 Peprodev Woocommerce Receipt Uploader | 2026-11-11 | 5.3 Medium |
| PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and including 2.8.0 (latest on wordpress.org; no fixed version available at the time of writing), is vulnerable to unauthenticated missing-authorization / IDOR write. Requires WooCommerce. | ||||
| CVE-2026-14314 | 1 Wordpress-extensions | 1 Peprodev Woocommerce Receipt Uploader | 2026-11-11 | 5.3 Medium |
| The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a requested attachment belongs to the order referenced by its access token, allowing unauthenticated attackers to forge a token and disclose image attachments, including other customers' uploaded payment receipts, that they do not own. | ||||
| CVE-2026-16268 | 1 Wordpress-extensions | 1 Newsletters | 2026-11-11 | 8.2 High |
| The Newsletters WordPress plugin before 4.16 does not authenticate or validate a bounce-processing request before fetching a user-supplied URL on the server side, allowing unauthenticated attackers to make the site issue requests to arbitrary internal or external hosts. | ||||
| CVE-2026-16954 | 1 Wordpress-extensions | 1 Ai Engine | 2026-11-11 | 6.5 Medium |
| The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being restricted to administrators everywhere else. | ||||
| CVE-2026-18050 | 1 Wordpress-extensions | 1 Events Manager | 2026-11-11 | 7.5 High |
| The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy, is disclosed only to the uploader, and the file is removed on submission or by a scheduled cleanup, so a cross-user read is not achievable by guessing alone. | ||||
| CVE-2026-11588 | 1 Wordpress-extensions | 1 Eonsr Aeo Agent | 2026-11-11 | 6.1 Medium |
| The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any authorisation check on one of its REST API routes and disables HTML sanitisation before saving the post, allowing unauthenticated attackers to create administrator-attributed published posts containing arbitrary web scripts that execute in the browser of any visitor, including administrators (Stored XSS). | ||||
| CVE-2026-14829 | 1 Wordpress-extensions | 1 Checkimate | 2026-11-11 | 8.2 High |
| The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated attackers to deactivate the Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13's premium licensing state and erase the stored license key. | ||||