4.3

CVSS3.1

CVE-2026-24588 - WordPress Smart Product Viewer plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through <= 1.5.4.

πŸ“… Published: Jan. 23, 2026, 2:29 p.m. πŸ”„ Last Modified: April 23, 2026, 3:36 p.m.

5.4

CVSS3.1

CVE-2026-24587 - WordPress AJAX Hits Counter + Popular Posts Widget plugin <= 0.10.210305 - Broken Access Control vu…

Missing Authorization vulnerability in kutsy AJAX Hits Counter + Popular Posts Widget ajax-hits-counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Hits Counter + Popular Posts Widget: from n/a through <= 0.10.210305.

πŸ“… Published: Jan. 23, 2026, 2:29 p.m. πŸ”„ Last Modified: April 23, 2026, 3:36 p.m.

6.5

CVSS3.1

CVE-2026-24585 - WordPress Hyyan WooCommerce Polylang Integration plugin <= 1.5.0 - Broken Access Control vulnerabil…

Missing Authorization vulnerability in Hyyan Abo Fakher Hyyan WooCommerce Polylang Integration woo-poly-integration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hyyan WooCommerce Polylang Integration: from n/a through <= 1.5.0.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 16, 2026, 1:45 a.m.

5.9

CVSS3.1

CVE-2026-24584 - WordPress Tutor LMS BunnyNet Integration plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS BunnyNet Integration tutor-lms-bunnynet-integration allows DOM-Based XSS.This issue affects Tutor LMS BunnyNet Integration: from n/a through <= 1.0.0.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 16, 2026, 7:30 a.m.

5.3

CVSS3.1

CVE-2026-24583 - WordPress SumUp Payment Gateway For WooCommerce plugin <= 2.7.9 - Broken Access Control vulnerabili…

Missing Authorization vulnerability in sumup SumUp Payment Gateway For WooCommerce sumup-payment-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SumUp Payment Gateway For WooCommerce: from n/a through <= 2.7.9.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.

5.4

CVSS3.1

CVE-2026-24581 - WordPress Points and Rewards for WooCommerce plugin <= 2.9.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce points-and-rewards-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Points and Rewards for WooCommerce: from n/a through <= 2.9.5.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.

4.3

CVSS3.1

CVE-2026-24580 - WordPress Ecwid Shopping Cart plugin <= 7.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart ecwid-shopping-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ecwid Shopping Cart: from n/a through <= 7.0.5.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.

4.3

CVSS3.1

CVE-2026-24579 - WordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a through <= 1.1.9.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.

4.3

CVSS3.1

CVE-2026-24578 - WordPress Admin login URL Change plugin <= 1.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jahid Hasan Admin login URL Change admin-login-url-change allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin login URL Change: from n/a through <= 1.1.5.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.

5.3

CVSS3.1

CVE-2026-24577 - WordPress Pie Register plugin <= 3.8.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through <= 3.8.4.8.

πŸ“… Published: Jan. 23, 2026, 2:28 p.m. πŸ”„ Last Modified: April 24, 2026, 6:07 p.m.
Total resulsts: 349182
Page 1971 of 34,919
Β« previous page Β» next page
Filters