CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-111960 | MEDIUM | 4.3 | The Royal MCP WordPress plugin before 1.5.10 does not perform object-level or post-type authorisati… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111577 | HIGH | 7.2 | The GoSMTP WordPress plugin before 1.2.5 does not perform a settings-management authorization check… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-111032 | LOW | 3.8 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly verify authorization against… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111031 | MEDIUM | 4.7 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not validate a user-supplied URL before u… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111027 | MEDIUM | 6.8 | The Welcart e-Commerce WordPress plugin before 2.12.6 does not properly sanitise and escape a parame… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-111021 | HIGH | 7.1 | The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise a… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-110691 | MEDIUM | 6.5 | The WPOrLogin WordPress plugin before 3.1.0 does not perform a capability check or validate a nonce… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110524 | MEDIUM | 6.8 | The Copy Anything to Clipboard for WordPress WordPress plugin before 5.5.5 does not sanitize and es… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110509 | MEDIUM | 5.3 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not restrict the post type or… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-110507 | LOW | 2.7 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not restrict the query arguments … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110506 | MEDIUM | 6.8 | The Page Builder by SiteOrigin WordPress plugin before 2.38.0 does not sanitize or escape a widget p… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-110292 | MEDIUM | 6.5 | The PayPlug for WooCommerce (Official) WordPress plugin before 3.1.1 does not verify that the reques… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109236 | MEDIUM | 4.8 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-107100 | MEDIUM | 5.3 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not verify that a requested po… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-107098 | MEDIUM | 6.8 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not sanitise and escape one of… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-107097 | MEDIUM | 5.3 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not perform any authorization … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106647 | LOW | 3.8 | The Royal Addons for Elementor WordPress plugin before 1.7.1070 does not scope a contact form's ema… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-106003 | MEDIUM | 5.3 | The Court Reservation WordPress plugin before 1.12.4 does not perform any authorization, authentica… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-106002 | MEDIUM | 5.3 | The Court Reservation WordPress plugin before 1.12.4 does not perform any authorisation or nonce ve… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-105997 | MEDIUM | 5.3 | The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking ver… |
T1078
T1548
|
|
2026-10-28 |