CVE Notifier

CVE-2026-85680 CWE-? N/A

Ultimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page Title

The Ultimate Member WordPress plugin before 2.13.1 does not escape a value derived from user supplied profile names before outputting it in the page title, and decodes HTML entities in it after its own sanitisation has …

cve.org Unknown:Ultimate · Member 11 jam lalu

CVE-2026-85574 CWE-? N/A

Unbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains

The Unbounce Landing Pages WordPress plugin before 1.1.5 does not perform any authorisation check when updating the configuration its front-end proxy relies on, allowing any authenticated user, such as a subscriber, to p…

cve.org Unknown:Unbounce · Landing · Pages 11 jam lalu

CVE-2026-84750 CWE-? N/A

Ultimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Field

The Ultra Addons for Contact Form 7 WordPress plugin before 3.5.51 does not validate the type or extension of files uploaded through one of its form fields, and stores them at a predictable public path with the attacker-…

cve.org Unknown:Ultra · Addons · for 11 jam lalu

CVE-2026-76790 CWE-? N/A

Estatik < 4.3.5 - Reflected XSS via get_listings hash Parameter

The Estatik Real Estate Plugin WordPress plugin before 4.3.5 does not sanitise and escape several values decoded from a request parameter before reflecting them back in an unauthenticated AJAX response, leading to Reflec…

cve.org Unknown:Estatik · Real · Estate 11 jam lalu

CVE-2026-76554 CWE-? N/A

WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import

The WP Import Export Lite WordPress plugin before 3.9.35 does not verify that the user running an import is permitted to create or modify user accounts and assign roles, allowing users granted a delegated WP Import Expor…

cve.org Unknown:WP · Import · Export 11 jam lalu

CVE-2026-19860 CWE-? N/A

JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom field-validation callback, relying on a blocklist that omits a f…

cve.org Unknown:JetFormBuilder · — · Dynamic 11 jam lalu

CVE-2025-15698 CWE-? N/A

Business Name Generator <= 1.3 - Admin+ Stored XSS via Button Color Setting

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…

cve.org Unknown:Business · Name · Generator 11 jam lalu

CVE-2026-16557 CWE-? N/A

Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins

The Nimble Page Builder WordPress plugin through 3.3.8 does not perform an authorization check when returning page-builder content through an authenticated AJAX action, allowing any authenticated user (Subscriber+) to di…

cve.org Unknown:Nimble · Page · Builder 11 jam lalu

CVE-2026-93741 CWE-120 10.0

Totolink A3002MU formWlWds buffer overflow

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in bu…

cve.org Totolink:A3002MU 12 jam lalu

CVE-2026-92807 CWE-94 8.8

Save as PDF Plugin by PDFCrowd <= 4.6.1 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute

The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Arbitrary Function Invocation in all versions up to, and including, 4.6.1 via the `pdf_created_callback` shortcode attribute. The `eval_shortcode()…

cve.org pdfcrowd:Save · as · PDF 15 jam lalu

CVE-2026-92967 CWE-79 6.1

Pochipp <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter

The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $_GET['keyw…

cve.org wppochipp:Pochipp 15 jam lalu

CVE-2026-12042 CWE-79 4.4

WP2Social Auto Publish <= 2.4.12 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'pages' Parameter

The WP2Social Auto Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.4.12 due to insufficient input sanitization and output escaping. Thi…

cve.org f1logic:WP2Social · Auto · Publish 15 jam lalu