blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

CVEs stored22,580
Affected records46,283
Newest source updateNovember 8, 2026
CVE-2026-88930 October 11, 2026
The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a parameter before using it… Full details
HIGH 8.6
CVE-2026-88905 October 11, 2026
The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that… Full details
HIGH 8.8
CVE-2026-88903 October 11, 2026
The Topcontent WordPress plugin through 1.2.1 does not properly authorise one of its request handlers and disables HTML sanitisation before storing the submitted content, allowing unauthenticated attackers to publish arbitrary posts containing malicious JavaScript… Full details
HIGH 8.8
CVE-2026-88827 October 11, 2026
The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has disabled to continue authenticating with the account's full… Full details
HIGH 8.8
CVE-2026-88826 October 11, 2026
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing… Full details
HIGH 8.8
CVE-2026-88785 October 11, 2026
The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser… Full details
MEDIUM 4.7
CVE-2026-87764 October 11, 2026
The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape message content before… Full details
HIGH 8.8
CVE-2026-87762 October 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead can be bypassed on installations where the secret key… Full details
HIGH 8.8
CVE-2026-87761 October 11, 2026
The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide configuration, and does not escape those configuration values… Full details
HIGH 8
CVE-2026-87760 October 11, 2026
The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting them in a script context on an administrative page, allowing… Full details
HIGH 8.8
CVE-2026-86798 October 11, 2026
The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outputting them in a public page,… Full details
HIGH 8.8
CVE-2026-86717 October 11, 2026
The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress options, which can take the site offline and… Full details
CRITICAL 9.1
CVE-2026-86706 October 11, 2026
The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allowing unauthenticated users to… Full details
CRITICAL 9.1
CVE-2026-85126 October 11, 2026
The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant themselves the administrator role or… Full details
HIGH 7.2
CVE-2026-85121 October 11, 2026
The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary WordPress options with request data, which can… Full details
CRITICAL 9.1
CVE-2026-85118 October 11, 2026
The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which… Full details
CRITICAL 9.8
CVE-2026-84737 October 11, 2026
The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to log in as any user whose email address they know, including administrators. Full details
CRITICAL 9.8
CVE-2026-84734 October 11, 2026
The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, allowing unauthenticated attackers to obtain a session as… Full details
CRITICAL 9.8
CVE-2026-84261 October 11, 2026
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored… Full details
HIGH 8.8
CVE-2026-84260 October 11, 2026
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS… Full details
HIGH 8.8
CVE-2026-84259 October 11, 2026
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which… Full details
HIGH 8.8
CVE-2026-84258 October 11, 2026
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS… Full details
HIGH 8.8
CVE-2026-84254 October 11, 2026
The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to… Full details
CRITICAL 9.8
CVE-2026-84253 October 11, 2026
The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be… Full details
CRITICAL 9.8
CVE-2026-84252 October 11, 2026
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated… Full details
CRITICAL 9.8
CVE-2026-84251 October 11, 2026
The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be… Full details
CRITICAL 9.8
CVE-2026-81649 October 11, 2026
The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical on every installation, allowing unauthenticated attackers… Full details
CRITICAL 9.1
CVE-2026-81420 October 11, 2026
The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthenticated users to perform SQL… Full details
HIGH 8.6
CVE-2026-81156 October 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to… Full details
MEDIUM 6.8
CVE-2026-81155 October 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site… Full details
MEDIUM 6.8
CVE-2026-81154 October 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform… Full details
MEDIUM 6.8
CVE-2026-81153 October 11, 2026
The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform… Full details
MEDIUM 6.8
CVE-2026-14854 October 11, 2026
The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and… Full details
HIGH 7.5
CVE-2026-12980 October 11, 2026
The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor role and above to inject arbitrary web scripts that execute… Full details
MEDIUM 6.8
CVE-2026-107694 October 11, 2026
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the requesting vendor, allowing vendors to disclose the commission… Full details
LOW 2.7
CVE-2026-107507 October 11, 2026
The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the section, age group, author, password,… Full details
LOW 2.7
CVE-2026-106029 October 11, 2026
The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide. Full details
HIGH 7.5
CVE-2026-104684 October 11, 2026
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to… Full details
LOW 2.7
CVE-2026-104682 October 11, 2026
The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to… Full details
LOW 2.7
CVE-2026-104681 October 11, 2026
The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to… Full details
LOW 2.7
CVE-2026-104680 October 11, 2026
The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress… Full details
HIGH 7.2
CVE-2026-104028 October 11, 2026
The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files… Full details
CRITICAL 9.8
CVE-2026-103695 October 11, 2026
The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. Full details
HIGH 8.6
CVE-2026-103694 October 11, 2026
The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with a self-registered account, such… Full details
HIGH 8.8
CVE-2026-103305 October 11, 2026
The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowing unauthenticated users to perform Stored Cross-Site… Full details
HIGH 8.8
CVE-2026-108695 October 11, 2026
MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST endpoint. Attackers with the store_owner role can send POST requests to /wp-json/multivendorx/v1/settings,… Full details
HIGH 7.1
CVE-2026-81797 October 10, 2026
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme Full details
CRITICAL 9.8
CVE-2026-62035 October 10, 2026
Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted Full details
MEDIUM 6.3
CVE-2026-57806 October 10, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through… Full details
HIGH 7.1
CVE-2026-105892 October 10, 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Path Traversal.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from… Full details
CRITICAL 9.8