CVEs
Browse the synced catalog, newest first.
- CVE-2026-121858Event Tickets with Ticket Scanner < 3.2.9 - Authenticated SQLi via DataTables SearchEvent Tickets with Ticket Scanner
- CVE-2026-121857Event Tickets with Ticket Scanner < 3.1.14 - Authenticated Ticket Data Disclosure and Removal via executeWCBackendEvent Tickets with Ticket Scanner
- CVE-2026-121848Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link GenerationMagic Link
- CVE-2026-121796Add From Server Reloaded < 6.0.0 - Author+ Stored XSS via SVG UploadAdd From Server Lite
- CVE-2026-121492Fiber Admin < 4.0.1 - Unauthenticated Arbitrary Post and Term Order Modification via fiad_cpo_update and fiad_cpo_tax_updateFiber Admin
- CVE-2026-121491Fiber Admin 3.1.0 - 4.0.0 - Unauthenticated RCE via Host HeaderFiber Admin
- CVE-2026-121380Tournamatch < 4.7.1 - Unauthenticated Team Invitation Email Disclosure via REST APITournamatch
- CVE-2026-121379Tournamatch < 4.7.1 - Subscriber+ Arbitrary File DeletionTournamatch
- CVE-2026-119073Live Composer < 2.1.23 - Contributor+ Stored XSS via Post Module PaginationLive Composer
- CVE-2026-118534Directorist < 8.11 - Subscriber+ Payment Retry on Other Users' Orders via IDORDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118533Directorist < 8.11 - Subscriber+ Order and Payment Information Disclosure via Payment ReceiptDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118532Directorist < 8.11 - Subscriber+ Arbitrary Media Deletion via Listing Image FieldDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118530Directorist < 8.11 - Admin+ Cross-Site Account Lockout via Email Verification Bulk ActionDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118529Directorist < 8.11 - Subscriber+ Other Users' Pending Listing Publication via Featured Listing CheckoutDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-118528Directorist < 8.11 - Subscriber+ Draft Listing Contact Information Disclosure via IDORDirectorist: AI-Powered Business Directory, Listings & Clas…
- CVE-2026-117588WP Google Review Slider < 18.11 - Google API Settings Update via CSRFWP Google Review Slider
- CVE-2026-117525FV Player < 7.5.57.7212 - Unauthenticated Stored XSS via Comment PopupFV Flowplayer Video Player
- CVE-2025-15708Live Composer < 2.1.23 - Admin+ Stored XSS via Partner SlugLive Composer
- CVE-2026-97191Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save PathAdvanced Custom Fields
- CVE-2026-97190Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDORAdvanced Custom Fields
- CVE-2026-97189Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational FieldsAdvanced Custom Fields
- CVE-2026-18535IBM API Connect Denial of ServiceIBM API Connect
- CVE-2026-19124Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-17393Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-17386Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-17384Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-75590Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-19131Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-19129Multiple Vulnerabilities in IBM API ConnectIBM API Connect
- CVE-2026-19128Multiple Vulnerabilities in IBM API ConnectIBM API Connect