CVE IDSeverityCVSSDescriptionDate
CVE-2026-121858NAN/AThe Event Tickets with Ticket Scanner WordPress plugin before 3.2.9 does not properly escape a search value be…2026-11-07
CVE-2026-121866NAN/AThe iLeads SMS Gateway by Exsile WordPress plugin before 2.0.0 does not check capabilities or nonces in severa…2026-11-07
CVE-2026-122001NAN/AThe Komfortkasse for WooCommerce WordPress plugin before 1.4.9 does not properly validate the authenticity of …2026-11-07
CVE-2026-97189NAN/AThe Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when…2026-11-07
CVE-2026-97190NAN/AThe Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not verify that a user is allowed to edi…2026-11-07
CVE-2026-97191NAN/AThe Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not re-apply its field-group location ru…2026-11-07
CVE-2026-103917MEDIUM6.5The The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to arbitra…2026-11-07
CVE-2026-115811HIGH7.2The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'star_rating…2026-11-07
CVE-2026-116558HIGH7.2The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…2026-11-07
CVE-2026-116621MEDIUM6.4The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Pl…2026-11-07
CVE-2026-118048MEDIUM6.4The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autoc…2026-11-07
CVE-2026-118204MEDIUM6.4The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerab…2026-11-07
CVE-2026-118800MEDIUM6.4The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin…2026-11-07
CVE-2026-118801MEDIUM4.3The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin…2026-11-07
CVE-2026-120479MEDIUM6.4The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerab…2026-11-07
CVE-2026-120515MEDIUM6.4The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting v…2026-11-07
CVE-2026-120530MEDIUM5.7The WebToffee WP Backup and Migration plugin for WordPress is vulnerable to generic SQL Injection via the 'des…2026-11-07
CVE-2026-120537HIGH7.2The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to St…2026-11-07
CVE-2026-121536MEDIUM5.3The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerab…2026-11-07
CVE-2026-121792MEDIUM6.5The GamiPress – Gamification plugin to reward points, badges & ranks in WordPress, now with AI plugin for Word…2026-11-07
CVE-2026-122037HIGH7.2The AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia plugin for WordP…2026-11-07
CVE-2026-122265MEDIUM5.9The Vanquish Upload Files for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all ver…2026-11-07
CVE-2026-83495NAN/AA flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this …2026-11-07
CVE-2026-87112HIGH8.8The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions …2026-11-07
CVE-2026-93370MEDIUM5.3The Paystack WooCommerce Payment Gateway plugin for WordPress is vulnerable to Sensitive Information Exposure …2026-11-07
CVE-2026-123881HIGH7.3A vulnerability was found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This i…2026-11-07
CVE-2026-104738HIGH8.1The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to PHP Object In…2026-11-07
CVE-2026-119467MEDIUM5.4Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorre…2026-11-07
CVE-2026-119489MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bootstra…2026-11-07
CVE-2026-119510MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saeed MC…2026-11-07
CVE-2026-120848MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WC Lover…2026-11-07
CVE-2026-120849MEDIUM4.3Missing Authorization vulnerability in WC Lovers WCFM Marketplace wc-multivendor-marketplace allows Exploiting…2026-11-07
CVE-2026-121761MEDIUM4.3Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Inco…2026-11-07
CVE-2026-121767MEDIUM5.3Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Co…2026-11-07
CVE-2026-121768MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Markus W…2026-11-07
CVE-2026-121778MEDIUM5.3Missing Authorization vulnerability in WP Lab WP-Lister Lite for Amazon wp-lister-for-amazon allows Exploiting…2026-11-07
CVE-2026-121779MEDIUM5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooComme…2026-11-07
CVE-2026-121781MEDIUM5.3Missing Authorization vulnerability in WP ManageNinja LLC Fluent Booking fluent-booking allows Exploiting Inco…2026-11-07
CVE-2026-122675MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Social wp-social allows Cross Site Request Forgery…2026-11-07
CVE-2026-123957CRITICAL9.9A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the f…2026-11-07
CVE-2026-123958CRITICAL9.9A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConf…2026-11-07
CVE-2026-124274MEDIUM5.3Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Co…2026-11-07
CVE-2026-39733MEDIUM5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction …2026-11-07
CVE-2026-52713MEDIUM5.4Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configure…2026-11-07
CVE-2026-66669HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Suplugins Superb Addons: Blocks, Patterns & Theme Desig…2026-11-07
CVE-2026-103900HIGH8.1The WPJAM Basic plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 7…2026-11-07
CVE-2026-104992MEDIUM6.5The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to authorization …2026-11-07
CVE-2026-107616HIGH7.5The Amelia plugin for WordPress is vulnerable to unauthorized access of attendee data due to a missing authori…2026-11-07
CVE-2026-110004MEDIUM6.5The wpForo Forum plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path v…2026-11-07
CVE-2026-118784MEDIUM6.4The WPSpeed plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including…2026-11-07
←103 / 8516→