CVE Notifier

CVE-2026-88994 CWE-? 6.6

All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block Attributes

The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it to build a filesystem path that is included at render time, allowing users with contributor-level access and ab…

WPScan Unknown:All · Bootstrap · Blocks 2 hari lalu

CVE-2026-86800 CWE-? 5.3

WP Ghost (Hide My WP Ghost) < 7.0.11 - Unauthenticated URL Hiding Bypass via Loopback Compatibility Check

The Hide My WP Ghost WordPress plugin before 7.0.11 does not properly validate a loopback security-check request before disabling its login and URL hiding protection, dropping that protection precisely when the request's…

WPScan Unknown:Hide · My · WP 2 hari lalu

CVE-2026-86796 CWE-? 5.3

WP Ghost (Hide My WP Ghost) 7.0.10 - Unauthenticated Firewall, Threat Detection and URL Hiding Bypass via WooCommerce Request Parameters

The Hide My WP Ghost WordPress plugin before 7.0.11 does not verify that a request is a genuine WooCommerce request before disabling its firewall, threat-detection and login/URL-hiding protections, treating the mere pres…

WPScan Unknown:Hide · My · WP 2 hari lalu

CVE-2026-79713 CWE-? 6.5

Breeze Cache 1.2.5 - 2.5.14 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The Breeze Cache WordPress plugin before 2.5.15 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have …

WPScan Unknown:Breeze · Cache 2 hari lalu

CVE-2026-90984 CWE-? N/A

Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field

The Generate PDF using Contact Form 7 WordPress plugin before 4.2.2 does not restrict the destination of the image fetch its PDF renderer performs on submitted form content, allowing unauthenticated users to make the ser…

WPScan Unknown:Generate · PDF · using 2 hari lalu

CVE-2026-90978 CWE-? N/A

Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check

The Filter Gallery WordPress plugin before 1.1.5 does not verify the nonce on several of its AJAX handlers when the nonce field is omitted, and applies no capability check, allowing low-privileged users to overwrite the …

WPScan Unknown:Filter · Gallery 2 hari lalu

CVE-2026-89008 CWE-? N/A

Bookit < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appo…

WPScan Unknown:Bookit · — · Booking 2 hari lalu

CVE-2026-89007 CWE-? N/A

Bookit < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion via Missing Authorization

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with its low-privileged custom Staff role to de…

WPScan Unknown:Bookit · — · Booking 2 hari lalu

CVE-2026-88993 CWE-? N/A

All Bootstrap Blocks <= 1.3.31 - Contributor+ Stored XSS via areoi/button type Attribute

The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it in HTML tag-name position, allowing users with Contributor-level access and above to inject arbitra…

WPScan Unknown:All · Bootstrap · Blocks 2 hari lalu

CVE-2026-88844 CWE-? N/A

MasterStudy LMS 3.6.2 - < 3.7.50 - Instructor+ Student PII Disclosure via IDOR

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that the requesting user owns the course before returning its enrolled-student data, allowing users with the MasterStudy LMS WordPress …

WPScan Unknown:MasterStudy · LMS · WordPress 2 hari lalu

CVE-2026-88825 CWE-? N/A

iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings

The iGMS Direct Booking WordPress plugin before 2.0 does not authorise or escape its widget appearance settings, allowing unauthenticated users to store arbitrary web scripts that execute in the context of an administrat…

WPScan Unknown:iGMS · Direct · Booking 2 hari lalu

CVE-2026-88798 CWE-? N/A

Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header

The Really Simple Security WordPress plugin before 9.8.3 does not validate a client-supplied address value before using it as a storage key in one of its own options, allowing unauthenticated attackers to grow that opti…

WPScan Unknown:Really · Simple · Security 2 hari lalu