|
1791
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in RealMag777 FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through <=…
|
CWE-862
Missing Authorization
|
CVE-2026-39501
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1792
|
5.4 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a thr…
|
CWE-862
Missing Authorization
|
CVE-2026-39504
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1793
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects …
|
CWE-862
Missing Authorization
|
CVE-2026-39505
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1794
|
4.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a th…
|
CWE-862
Missing Authorization
|
CVE-2026-39506
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1795
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Josh Kohlbach Advanced Coupons for WooCommerce Coupons advanced-coupons-for-woocommerce-free allo…
|
CWE-79
Cross-site Scripting
|
CVE-2026-39508
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1796
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in wpWax Directorist directorist allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directorist: from n/a through <= 8.5.10.
|
CWE-862
Missing Authorization
|
CVE-2026-39509
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1797
|
2.7 |
LOW
Network
|
-
|
-
|
Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control S…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-39510
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1798
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue …
|
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
|
CVE-2026-39516
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1799
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects Blog Filter: from n/a t…
|
CWE-79
Cross-site Scripting
|
CVE-2026-39517
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1800
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through <= 2.1.18.
|
CWE-862
Missing Authorization
|
CVE-2026-39520
|
2026-04-25 03:08 |
2026-04-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|