CVE-2026-81286 - WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
CVE ID :CVE-2026-81286
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81286
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated SQL Injection in WCFM Marketplace <= 3.8.1 versions.
Severity: 9.3 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81288 - WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-81288
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81288
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Upsell Order Bump Offer for WooCommerce <= 3.1.5 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81289 - WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-81289
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81289
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in MP3 Audio Player for Music, Radio & Podcast by Sonaar <= 5.13.1 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81294 - WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
CVE ID :CVE-2026-81294
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81294
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Privilege Escalation in Authorizer <= 3.15.1 versions.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81769 - WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability
CVE ID :CVE-2026-81769
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Subscriber Privilege Escalation in Booking Hub <= 1.3.1 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81769
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Subscriber Privilege Escalation in Booking Hub <= 1.3.1 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81770 - WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-81770
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Interactive Geo Maps <= 1.6.30 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81770
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Interactive Geo Maps <= 1.6.30 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81771 - WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-81771
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81771
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in TrustedSite <= 1.2.5 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81772 - WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability
CVE ID :CVE-2026-81772
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81772
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated PHP Object Injection in Ninja Forms - Layout & Styles <= 3.0.31 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81774 - WordPress WooCommerce Product Attachment plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
CVE ID :CVE-2026-81774
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment <= 2.3.3 versions.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81774
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Sensitive Data Exposure in WooCommerce Product Attachment <= 2.3.3 versions.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-81775 - WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-81775
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-81775
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Scripting (XSS) in Estatik <= 4.3.4 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82223 - WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability
CVE ID :CVE-2026-82223
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-82223
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-83562 - WordPress WCFM Marketplace plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability
CVE ID :CVE-2026-83562
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-83562
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Contributor Cross Site Scripting (XSS) in WCFM Marketplace <= 3.8.2 versions.
Severity: 6.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84759 - WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE ID :CVE-2026-84759
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84759
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.
Severity: 7.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84760 - WordPress Ultimate Gift Cards For WooCommerce plugin <= 3.2.9 - Broken Access Control vulnerability
CVE ID :CVE-2026-84760
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84760
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Broken Access Control in Ultimate Gift Cards For WooCommerce <= 3.2.9 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84764 - WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability
CVE ID :CVE-2026-84764
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84764
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Simply Schedule Appointments <= 1.6.12.23 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84770 - WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE ID :CVE-2026-84770
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84770
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Cross Site Request Forgery (CSRF) in Mang Board WP <= 2.3.8 versions.
Severity: 8.8 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84771 - WordPress PublishPress Permissions plugin <= 4.8.3 - Insecure Direct Object References (IDOR) vulnerability
CVE ID :CVE-2026-84771
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84771
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Insecure Direct Object References (IDOR) in PublishPress Permissions <= 4.8.3 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84772 - WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
CVE ID :CVE-2026-84772
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84772
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.
Severity: 5.5 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84775 - WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
CVE ID :CVE-2026-84775
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84775
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-84780 - WordPress WP Go Maps plugin <= 10.1.08 - Denial of Service Attack vulnerability
CVE ID :CVE-2026-84780
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-84780
Published : Sept. 2, 2026, 11:37 a.m. | 34 minutes ago
Description :Unauthenticated Denial of Service Attack in WP Go Maps <= 10.1.08 versions.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-66652 - WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability
CVE ID :CVE-2026-66652
Published : Sept. 2, 2026, 11:50 a.m. | 22 minutes ago
Description :Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID :CVE-2026-66652
Published : Sept. 2, 2026, 11:50 a.m. | 22 minutes ago
Description :Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...