CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113813 | MEDIUM | 6.5 | The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not perform any capability… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-113488 | MEDIUM | 6.8 | The GeoDirectory WordPress plugin before 2.8.196 does not properly escape a post badge shortcode at… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-113487 | MEDIUM | 6.8 | The GeoDirectory WordPress plugin before 2.8.196 does not properly sanitise or escape a post badge … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-113486 | MEDIUM | 6.5 | The Media Library Assistant WordPress plugin before 3.42 does not verify a CSRF nonce on its Empty T… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-113485 | MEDIUM | 6.5 | The Media Library Assistant WordPress plugin before 3.42 does not consistently validate its CSRF non… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111967 | MEDIUM | 6.8 | The MP3 Audio Player WordPress plugin before 5.16 does not escape one of its audio player shortcode… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111960 | MEDIUM | 4.3 | The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisati… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111031 | MEDIUM | 4.7 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before u… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111027 | MEDIUM | 6.8 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parame… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110691 | MEDIUM | 6.5 | The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110524 | MEDIUM | 6.8 | The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and es… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110509 | MEDIUM | 5.3 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110506 | MEDIUM | 6.8 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget p… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110292 | MEDIUM | 6.5 | The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the reques… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109236 | MEDIUM | 4.8 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-107100 | MEDIUM | 5.3 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested po… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-107098 | MEDIUM | 6.8 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-107097 | MEDIUM | 5.3 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106003 | MEDIUM | 5.3 | The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentica… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106002 | MEDIUM | 5.3 | The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce ve… |
T1078
T1548
|
|
2026-10-28 |