CVE-2026-105061
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions.
CVE Vulnerability Database
Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.
CVE-2026-105059
6.5 MEDIUM 6.5Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Comments of wordpress: from n/a through 7.1.
WordPress
Details
CVE-2026-105058
8.8 HIGH 8.8Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions.
Subscriber
Details
CVE-2026-105057
5.3 MEDIUM 5.3Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions.
CVE-2026-104814
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
CVE-2026-104757
7.2 HIGH 7.2Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions.
Editor
Details
CVE-2026-104747
8.1 HIGH 8.1Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
PHP
Details
CVE-2026-104672
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.
CVE-2026-104670
7.1 HIGH 7.1Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions.
CVE-2026-104406
7.3 HIGH 7.3Unauthenticated Broken Access Control in picu <= 3.10.1 versions.
Statistics
Total
109556
Critical
11361
High
42666