Skip to main content
Skip to footer
Opens in a new tab
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Home
CVE Analysis
How it Works
Resources
Pricing
Log in
Create Account
Severity:
medium
CVE-2026-8617: SearchPlus <= 1.7.1 Missing Authorization to Unauthenticated Settings Modification and Deletion via searchplus_save_token & searchplus_reset_token AJAX Actions PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-8617 affects the SearchPlus plugin for WordPress (up to v1.7.1) with a medium severity CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-8690: RentMy Real-Time Rental Management Plugin <= 4.0.4.1 Missing Authorization to Unauthenticated Settings Update via rentmy_cdn_request AJAX Action PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-8690 affects the Rentmy Online Rental Shop plugin (up to 4.0.4.1) with a CVSS score of 5.3. This medium severity…
CVE-2026-9184: 24liveblog <= 2.2 Missing Authorization to Authenticated (Author+) Settings Modification via update_lb24_token AJAX action PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-9184 affects the 24liveblog plugin (up to v2.2) with a CVSS score of 4.3. Authenticated attackers can modify user settings…
CVE-2026-9183: 24liveblog <= 2.2 Authenticated (Contributor+) Exposure of Sensitive Information via Block Editor Script Localization PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-9183 affects the 24liveblog plugin version 2.2, exposing sensitive integration credentials to authenticated users with contributor access. Patch to mitigate…
CVE-2026-6292: MP Customize Login Page <= 1.0 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-6292 affects the MP Customize Login Page plugin for WordPress (v1.0) with a medium severity (CVSS 4.3) CSRF vulnerability. Ensure…
CVE-2026-7617: Secufor_OAuth <= 1.0.7 Missing Authorization to Unauthenticated Account Logout via 'secuforoauth_unregister_action' AJAX Action PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-7617 affects the Wpoauth plugin (up to version 1.0.7) with a medium severity (CVSS 5.3) vulnerability allowing unauthorized access. Users…
CVE-2026-8688: Advance Nav Menu Manager <= 1.3 Missing Authorization to Authenticated (Subscriber+) Nav Menu Item Modification via anmm_save_menu_data AJAX Action PoC, Patch Analysis & Rule
June 24, 2026
CVE-2026-8688 affects the Advance Nav Menu Manager plugin for WordPress (up to version 1.3) with a medium severity (CVSS 4.3)…
CVE-2026-11370: WP Meta SEO <= 4.5.18 Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-11370 affects the WP Meta SEO plugin (up to version 4.5.18) with a medium severity CVSS score of 6.4. Authenticated…
CVE-2026-12094: Advanced Contact Form 7 <= 1.0.0 Missing Authorization to Unauthenticated Arbitrary Contact Form Submission Deletion via 'form_id' Parameter PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-12094 affects the Advanced Contact Form 7 Compact Db plugin (v1.0.0) with a medium severity (CVSS 5.3). Unauthenticated attackers can…
CVE-2026-9620: WP Latest Posts <= 5.0.11 Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9620 affects the WP Latest Posts plugin for WordPress versions up to 5.0.11, allowing XSS attacks by authenticated users. Update…
CVE-2026-8896: MIR blocks and shortcodes <= 1.0.0 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-8896 affects the Mir Blocks And Shortcodes plugin (version 1.0.0) with a CVSS score of 6.4. Authenticated users can exploit…
CVE-2026-9616: Generate Security.txt <= 1.0.12 Missing Authorization to Authenticated (Subscriber+) Security.txt Deletion via delete_securitytxt AJAX Action PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9616 affects the Generate Security.txt plugin for WordPress (up to v1.0.12) with a CVSS score of 4.3. Authenticated users can…
CVE-2026-9724: MotorDesk <= 1.1.2 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9724 affects the Motordesk plugin for WordPress (up to version 1.1.2) with a medium severity (CVSS 4.3) CSRF vulnerability. Unauthenticated…
CVE-2026-11997: Bulk SEO Image <= 1.1 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-11997 affects the Bulk SEO Image plugin for WordPress (up to version 1.1) with a medium severity (CVSS 4.3) CSRF…
CVE-2026-9721: Book a Room Event Calendar <= 1.9 Cross-Site Request Forgery to Settings Update PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9721 affects the Book A Room Event Calendar plugin for WordPress (up to v1.9) with a CVSS score of 4.3.…
CVE-2026-9612: WhatsOrder <= 1.0.1 Unauthenticated Sensitive Information Exposure via Predictable Invoice File URLs PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9612 affects the WhatsOrder Instant Checkout for WooCommerce plugin (up to v1.0.1) with a CVSS score of 5.3. Unauthenticated attackers…
CVE-2026-8865: Avalon23 Products Filter for WooCommerce <= 1.1.6 Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-8865 affects the Avalon23 Products Filter for WooCommerce plugin (up to v1.1.6) with a medium severity (CVSS 6.4) Stored XSS…
CVE-2026-9619: Reviews and Rating <= 1.1.4 Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via sync_reviews AJAX Action PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-9619 affects the Reviews And Rating Docplanner plugin for WordPress (up to v1.1.4) with a medium severity (CVSS 4.3). It…
CVE-2026-10552: Blue Captcha <= 2.0.1 Cross-Site Request Forgery via 'blcap_action' Parameter PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-10552 affects Blue Captcha plugin versions up to 2.0.1 with a CVSS score of 4.3. It allows unauthenticated attackers to…
CVE-2026-8622: Image Sizes on Demand <= 1.3 Reflected Cross-Site Scripting via PHP_SELF Server Variable PoC, Patch Analysis & Rule
June 23, 2026
CVE-2026-8622 affects the Image Sizes On Demand plugin for WordPress (up to version 1.3) with a CVSS score of 6.1.…
←
1
…
19
20
21
22
23
…
120
→