Export limit exceeded: 12164 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (12164 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-65050 | 2 Ninjaforms, Wordpress | 2 Ninja Forms, Wordpress | 2026-07-23 | 6.5 Medium |
| Ninja Forms WordPress plugin version 3.14.8 and prior contains a missing authorization vulnerability in the render callback of the `ninja-forms/submissions-table` Gutenberg block that allows authenticated attackers with Author-level privileges to expose stored form submissions to unauthenticated visitors by embedding the block with an arbitrary formID on a published post. Attackers can retrieve the signed bearer token injected into every page visitor's browser via `wp_localize_script` and use it against the REST API submissions endpoint to access all saved form submission field values, including sensitive personally identifiable information such as names, email addresses, and phone numbers. | ||||
| CVE-2026-65452 | 2 Motovnet, Wordpress | 2 Ebook Store, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions. | ||||
| CVE-2026-65506 | 2026-07-23 | 5.3 Medium | ||
| Unauthenticated Broken Access Control in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.12 versions. | ||||
| CVE-2026-27418 | 2 Epsiloncool, Wordpress | 2 Wp Fast Total Search, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in WP Fast Total Search <= 1.81.282 versions. | ||||
| CVE-2026-57717 | 2026-07-23 | 6.5 Medium | ||
| Unauthenticated Broken Access Control in Knit Pay <= 9.6.0.0 versions. | ||||
| CVE-2026-57808 | 2 Saad Iqbal, Wordpress | 2 Wp Easypay, Wordpress | 2026-07-23 | 6.5 Medium |
| Subscriber Arbitrary Content Deletion in WP EasyPay <= 4.5.0 versions. | ||||
| CVE-2026-59522 | 2 Wedevs, Wordpress | 2 Wp Erp, Wordpress | 2026-07-23 | 6.5 Medium |
| Subscriber Broken Access Control in WP ERP <= 1.17.5 versions. | ||||
| CVE-2026-65489 | 2 Lastudio, Wordpress | 2 La-studio Element Kit For Elementor, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in LA-Studio Element Kit for Elementor <= 1.6.2 versions. | ||||
| CVE-2026-65495 | 2 Dokan Multivendor Plugin, Wordpress | 2 Dokan Pro, Wordpress | 2026-07-23 | 7.5 High |
| Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions. | ||||
| CVE-2026-65529 | 2 Iqonicdesign, Wordpress | 2 Graphina, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions. | ||||
| CVE-2026-65531 | 2 Themeum, Wordpress | 2 Qubely, Wordpress | 2026-07-23 | 4.8 Medium |
| Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions. | ||||
| CVE-2026-65491 | 2026-07-23 | 4.3 Medium | ||
| Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions. | ||||
| CVE-2026-59547 | 2 Easy Payment, Wordpress | 2 Payment Gateway For Paypal On Woo Commerce, Wordpress | 2026-07-23 | 7.5 High |
| Unauthenticated Broken Access Control in Payment Gateway for PayPal on WooCommerce <= 9.1.4 versions. | ||||
| CVE-2026-65484 | 2 Analogwp, Wordpress | 2 Style Kits, Wordpress | 2026-07-23 | 6.3 Medium |
| Contributor Broken Access Control in Style Kits <= 2.6.5 versions. | ||||
| CVE-2026-57830 | 2026-07-23 | N/A | ||
| Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion. | ||||
| CVE-2026-25424 | 2 Mediavine, Wordpress | 2 Mediavine Control Panel, Wordpress | 2026-07-23 | 4.3 Medium |
| Contributor Broken Access Control in Mediavine Control Panel <= 2.10.10 versions. | ||||
| CVE-2026-61943 | 2026-07-23 | 7.5 High | ||
| Unauthenticated Broken Access Control in WPDM – Premium Packages <= 6.2.0 versions. | ||||
| CVE-2026-65468 | 2026-07-23 | 5.3 Medium | ||
| Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions. | ||||
| CVE-2026-65487 | 2 Themegoods, Wordpress | 2 Photography, Wordpress | 2026-07-23 | 5.3 Medium |
| Unauthenticated Broken Access Control in Photography <= 7.7.6 versions. | ||||
| CVE-2026-65499 | 2026-07-23 | 6.5 Medium | ||
| Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. | ||||