Total
11535 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-105706 | 2026-10-06 | 5.0 MEDIUM | 4.3 MEDIUM | ||
| A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. | |||||
| CVE-2026-91108 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.10.41. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the post_content of any post or page on the site — including content they do not own — with LLM-generated text influenced by attacker-controlled keywords, enabling black-hat SEO manipulation and unauthorized consumption of the site owner's paid AltText.ai API credits. The nonce required to invoke the action is emitted on every admin page including /wp-admin/profile.php, which is accessible to Subscribers, making the nonce trivially obtainable by any authenticated user. | |||||
| CVE-2026-97309 | 2026-10-06 | N/A | N/A | ||
| Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4.1226. | |||||
| CVE-2026-93428 | 2026-10-06 | N/A | 7.5 HIGH | ||
| The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.13.1 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to view privacy-restricted member profile field values — including fields explicitly configured as owner-only, members-only, or role-restricted — by querying the publicly accessible wp_ajax_nopriv_um_get_members endpoint. The nonce required by the endpoint ('um-frontend-nonce') is emitted to all unauthenticated visitors via wp_localize_script, meaning it provides no meaningful access control and any anonymous visitor can satisfy the endpoint's authentication requirements. | |||||
| CVE-2026-11601 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.19. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to read, create, update, clone, and delete email notification flows, including overwriting the default reservation confirmation, cancellation, and admin alert emails with attacker-controlled content sent from the site's legitimate address, or destroying reservation notification flows entirely. The vulnerable endpoints are active by default on every WPCafe installation without any configuration requirement, as the Email_Automation_Service_Provider::is_enable() method unconditionally returns true and the plugin ships with five pre-configured default email flows upon activation. | |||||
| CVE-2026-101923 | 2026-10-06 | N/A | 8.1 HIGH | ||
| The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is due to the plugin storing attacker-controlled post IDs from the wcpr_image_upload_id parameter of a public review submission into the review's reviews-images comment meta without verifying that the IDs correspond to attachments owned by the submitter, combined with the delete_reviews_image() handler unconditionally calling wp_delete_post( $id, true ) on every stored ID when the review is deleted. This makes it possible for unauthenticated attackers to permanently delete arbitrary posts, pages, products, or media attachments on the site whenever an administrator subsequently deletes the attacker's review (or when WordPress's built-in wp_scheduled_delete cron empties the comment trash after 30 days). | |||||
| CVE-2026-94505 | 2026-10-06 | N/A | 8.1 HIGH | ||
| The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to permanently delete any reusable social message (nc_reusable_social post), including those authored by administrators or other privileged users. | |||||
| CVE-2026-39798 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. | |||||
| CVE-2026-41560 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. | |||||
| CVE-2026-39599 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions. | |||||
| CVE-2026-95526 | 2026-10-06 | N/A | 7.3 HIGH | ||
| Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions. | |||||
| CVE-2026-105072 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions. | |||||
| CVE-2026-32578 | 2026-10-06 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. | |||||
| CVE-2026-62072 | 2026-10-06 | N/A | 8.8 HIGH | ||
| Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. | |||||
| CVE-2026-104387 | 2026-10-06 | N/A | 7.2 HIGH | ||
| Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. | |||||
| CVE-2026-94669 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Forms Pro Add On Pack: from n/a through 6.2.13. | |||||
| CVE-2026-104386 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3. | |||||
| CVE-2026-103086 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through 1.2.74. | |||||
| CVE-2026-103684 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25. | |||||
| CVE-2026-48199 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions. | |||||