Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    9762 vulnerabilities by UNKNOWN

    CVE-2026-77116 (GCVE-0-2026-77116)

    Vulnerability from nvd – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
    Summary
    Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/db0a775c-cbac-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Brave Affected: 0 , < 0.8.6 (semver)
    		Create a notification for this product.
    Credits
    Huseyin Mertoglu WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Brave",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "0.8.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Huseyin Mertoglu"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough \u2014 can read popup content they shouldn\u0027t have access to by passing a post ID in the URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.405Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/db0a775c-cbac-4918-8b10-75f4fb2d716a/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Brave Popup Builder \u003c 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77116",
    "datePublished": "2026-08-23T06:00:18.405Z",
    "dateReserved": "2026-08-20T12:20:10.497Z",
    "dateUpdated": "2026-08-23T06:00:18.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77115 (GCVE-0-2026-77115)

    Vulnerability from nvd – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters
    Summary
    Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/d4a760c0-8e71-42… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Brave Affected: 0 , < 0.8.6 (semver)
    		Create a notification for this product.
    Credits
    Huseyin Mertoglu WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Brave",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "0.8.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Huseyin Mertoglu"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.239Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/d4a760c0-8e71-4261-a08b-9b6a296c631a/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Brave Popup Builder \u003c 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77115",
    "datePublished": "2026-08-23T06:00:18.239Z",
    "dateReserved": "2026-08-20T12:17:33.040Z",
    "dateUpdated": "2026-08-23T06:00:18.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77003 (GCVE-0-2026-77003)

    Vulnerability from nvd – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask
    Summary
    The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/1a78993c-1e5c-43… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Content Mask Affected: 1.8.0 , < 1.8.5.5 (semver)
    		Create a notification for this product.
    Credits
    Pablo González and Fran Ramírez WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Content Mask",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.8.5.5",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pablo Gonz\u00e1lez and Fran Ram\u00edrez"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.068Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/1a78993c-1e5c-43fb-9aa4-13edc24100ee/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77003",
    "datePublished": "2026-08-23T06:00:18.068Z",
    "dateReserved": "2026-08-20T07:27:14.074Z",
    "dateUpdated": "2026-08-23T06:00:18.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-14853 (GCVE-0-2026-14853)

    Vulnerability from nvd – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization
    Summary
    The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/dd6ec707-3943-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown WooCommerce Bookings Affected: 0 , < 3.9.0 (semver)
    		Create a notification for this product.
    Credits
    Mike Gozdiskowski WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WooCommerce Bookings",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "3.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mike Gozdiskowski"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:17.863Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/dd6ec707-3943-49be-81bb-c5dd51f2c001/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "WooCommerce Bookings \u003c 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-14853",
    "datePublished": "2026-08-23T06:00:17.863Z",
    "dateReserved": "2026-07-06T11:54:58.068Z",
    "dateUpdated": "2026-08-23T06:00:17.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-13598 (GCVE-0-2026-13598)

    Vulnerability from nvd – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator
    Summary
    The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/05fd8e45-92fa-4e… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown RestrictMate Affected: 0 , < 1.3.0 (semver)
    		Create a notification for this product.
    Credits
    João Ramos Maciel WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RestrictMate",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.3.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jo\u00e3o Ramos Maciel"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The RestrictMate  WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:17.682Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/05fd8e45-92fa-4ed4-ae59-9a7b7743ea34/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "RestrictMate \u003c 1.3.0 - Unauthenticated Privilege Escalation to Administrator",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-13598",
    "datePublished": "2026-08-23T06:00:17.682Z",
    "dateReserved": "2026-06-29T07:41:34.484Z",
    "dateUpdated": "2026-08-23T06:00:17.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77002 (GCVE-0-2026-77002)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass
    Summary
    The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/51236907-a1b4-4c… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown SmilePass Selfie Login Affected: 0 , ≤ 1.0.2 (semver)
    		Create a notification for this product.
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SmilePass Selfie Login",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.958Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/51236907-a1b4-4c3b-8c39-adafcab7a2ef/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SmilePass Selfie Login \u003c= 1.0.2 - Unauthenticated Authentication Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77002",
    "datePublished": "2026-08-22T06:00:17.958Z",
    "dateReserved": "2026-08-20T07:25:14.256Z",
    "dateUpdated": "2026-08-22T06:00:17.958Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77001 (GCVE-0-2026-77001)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass
    Summary
    The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user, including administrators. In the default case a session as the site's original administrator account is obtained without needing to know any account details at all.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/01c78c78-3915-44… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Social Login \u0026 Sharing buttons with Analytics By SoClever",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Social Login \u0026 Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user, including administrators. In the default case a session as the site\u0027s original administrator account is obtained without needing to know any account details at all."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.783Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/01c78c78-3915-44da-824a-f68074985c75/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Social Login \u0026 Sharing buttons with Analytics By SoClever \u003c= 1.2.0 - Unauthenticated Authentication Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77001",
    "datePublished": "2026-08-22T06:00:17.783Z",
    "dateReserved": "2026-08-20T07:24:49.747Z",
    "dateUpdated": "2026-08-22T06:00:17.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77000 (GCVE-0-2026-77000)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
    Summary
    The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/3051dece-7ecb-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown WP Social Media Login Affected: 0 , ≤ 1.0.6 (semver)
    		Create a notification for this product.
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "WP Social Media Login",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user\u0027s email address."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.601Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/3051dece-7ecb-4911-bf13-291ebdc34bff/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "WP Social Media Login \u003c= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77000",
    "datePublished": "2026-08-22T06:00:17.601Z",
    "dateReserved": "2026-08-20T07:24:00.357Z",
    "dateUpdated": "2026-08-22T06:00:17.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-76793 (GCVE-0-2026-76793)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Firebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim
    Summary
    The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/0414ef2b-0d97-41… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Firebase Authentication Affected: 0 , < 1.7.1 (semver)
    		Create a notification for this product.
    Credits
    Abdullah Kareem WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Firebase Authentication",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Abdullah Kareem"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.419Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/0414ef2b-0d97-41c7-9146-f31ace8b66b2/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Firebase Authentication \u003c 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-76793",
    "datePublished": "2026-08-22T06:00:17.419Z",
    "dateReserved": "2026-08-19T17:55:46.564Z",
    "dateUpdated": "2026-08-22T06:00:17.419Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-76789 (GCVE-0-2026-76789)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers
    Summary
    The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress plugin before 9.1.3's admin area, as well as any visitor of a page embedding a slider.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/f9f5485c-6231-49… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Artus KG WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Slider Hero with Video Background, Animation",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.1.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Artus KG"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress plugin before 9.1.3\u0027s admin area, as well as any visitor of a page embedding a slider."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.246Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/f9f5485c-6231-492c-b214-8da87a2bf4d1/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Slider Hero \u003c 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-76789",
    "datePublished": "2026-08-22T06:00:17.246Z",
    "dateReserved": "2026-08-19T17:55:37.640Z",
    "dateUpdated": "2026-08-22T06:00:17.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-19222 (GCVE-0-2026-19222)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
    Summary
    The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/bb3997c6-4d9a-46… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Forminator Forms Affected: 0 , < 1.57.0.7 (semver)
    		Create a notification for this product.
    Credits
    Thanh Lam Tang WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Forminator Forms",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.57.0.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanh Lam Tang"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Forminator Forms  WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.071Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/bb3997c6-4d9a-46f6-85d7-d472dfc00829/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Forminator Forms \u003c 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-19222",
    "datePublished": "2026-08-22T06:00:17.071Z",
    "dateReserved": "2026-08-07T09:04:29.255Z",
    "dateUpdated": "2026-08-22T06:00:17.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-19221 (GCVE-0-2026-19221)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
    Summary
    The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/5aa85c72-2a60-42… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Forminator Forms Affected: 1.40.0 , < 1.57.0.5 (semver)
    		Create a notification for this product.
    Credits
    Jakub Herman WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Forminator Forms",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.57.0.5",
              "status": "affected",
              "version": "1.40.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jakub Herman"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Forminator Forms  WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.858Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/5aa85c72-2a60-4243-b370-ef0b46e98cfe/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Forminator Forms \u003c 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-19221",
    "datePublished": "2026-08-22T06:00:16.858Z",
    "dateReserved": "2026-08-07T09:04:27.327Z",
    "dateUpdated": "2026-08-22T06:00:16.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-19093 (GCVE-0-2026-19093)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video Path
    Summary
    The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root. The readable files include the WordPress configuration file, which exposes the database credentials and the authentication keys and salts, so authentication cookies can be forged.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/9f8361a9-d424-43… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Tutor LMS Affected: 0 , < 4.0.6 (semver)
    		Create a notification for this product.
    Credits
    Sai Praneeth Koti WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tutor LMS",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Sai Praneeth Koti"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Tutor LMS  WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitrary files on the server, including files outside the web root.\n\nThe readable files include the WordPress configuration file, which exposes the database credentials and the authentication keys and salts, so authentication cookies can be forged."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-552 Files or Directories Accessible to External Parties",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.665Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/9f8361a9-d424-4346-9d92-6f27ab9261c9/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Tutor LMS \u003c 4.0.6 - Instructor+ Arbitrary File Read via Video Path",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-19093",
    "datePublished": "2026-08-22T06:00:16.665Z",
    "dateReserved": "2026-08-06T13:04:30.179Z",
    "dateUpdated": "2026-08-22T06:00:16.665Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-18052 (GCVE-0-2026-18052)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters
    Summary
    The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an administrator.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/e1e8c313-f7ea-4f… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown ManageWP Worker Affected: 0 , < 4.9.37 (semver)
    		Create a notification for this product.
    Credits
    Jakub Herman WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ManageWP Worker",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.9.37",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jakub Herman"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as any user on the site, including an administrator."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.489Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/e1e8c313-f7ea-4f3a-85c0-4f33dfe0710d/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "ManageWP Worker \u003c 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-18052",
    "datePublished": "2026-08-22T06:00:16.489Z",
    "dateReserved": "2026-07-28T12:02:13.304Z",
    "dateUpdated": "2026-08-22T06:00:16.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-16738 (GCVE-0-2026-16738)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Conekta Payment Gateway < 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery
    Summary
    The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without payment.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/89a2917e-032c-4f… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Conekta Payment Gateway Affected: 0 , < 6.2.2 (semver)
    		Create a notification for this product.
    Credits
    Pedro Pinho WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Conekta Payment Gateway",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.2.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pedro Pinho"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payment to the targeted order or verify its amount, allowing unauthenticated attackers to mark arbitrary orders as paid without payment."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.315Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/89a2917e-032c-4f0f-be44-1a50b9d6fddf/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Conekta Payment Gateway \u003c 6.2.2 - Unauthenticated Order Payment Completion via Webhook Forgery",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-16738",
    "datePublished": "2026-08-22T06:00:16.315Z",
    "dateReserved": "2026-07-23T08:16:28.988Z",
    "dateUpdated": "2026-08-22T06:00:16.315Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-16612 (GCVE-0-2026-16612)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    FiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure
    Summary
    The FiboSearch WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two endpoints are affected: the autocomplete search endpoint (dgwt_wcas_ajax_search) and the Details Panel endpoint (dgwt_wcas_result_details) when queried for taxonomy details.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/705cf14a-2782-40… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown FiboSearch Affected: 0 , < 1.34.1 (semver)
    		Create a notification for this product.
    Credits
    Duy Tran WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "FiboSearch",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.34.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Duy Tran"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The FiboSearch  WordPress plugin before 1.34.1 does not consistently exclude password-protected products from its unauthenticated AJAX endpoints, allowing unauthenticated users to disclose and enumerate password-protected products and their metadata without entering the product password. Two endpoints are affected: the autocomplete search endpoint (dgwt_wcas_ajax_search) and the Details Panel endpoint (dgwt_wcas_result_details) when queried for taxonomy details."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-200 Information Exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.136Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/705cf14a-2782-408a-80b1-be7a9da6bbdd/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "FiboSearch \u003c 1.34.1 - Unauthenticated Password-Protected Product Information Disclosure",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-16612",
    "datePublished": "2026-08-22T06:00:16.136Z",
    "dateReserved": "2026-07-22T14:35:43.427Z",
    "dateUpdated": "2026-08-22T06:00:16.136Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-16260 (GCVE-0-2026-16260)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Post Grid, Slider & Carousel Ultimate < 1.8.1 - Contributor+ Stored XSS via Header Title Field
    Summary
    The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contributor role and above to inject JavaScript that executes in the session of any administrator who opens the affected item.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/87c95831-d1b4-42… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Yaswanth Reddy Sunkara WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Post Grid, Slider \u0026 Carousel Ultimate",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.8.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Yaswanth Reddy Sunkara"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Post Grid, Slider \u0026 Carousel Ultimate  WordPress plugin before 1.8.1 does not sanitise and escape one of its custom post type settings before outputting it in an HTML attribute on the admin edit screen, allowing users with the Contributor role and above to inject JavaScript that executes in the session of any administrator who opens the affected item."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:15.962Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/87c95831-d1b4-42b2-8fc7-6cba60fca400/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Post Grid, Slider \u0026 Carousel Ultimate \u003c 1.8.1 - Contributor+ Stored XSS via Header Title Field",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-16260",
    "datePublished": "2026-08-22T06:00:15.962Z",
    "dateReserved": "2026-07-20T08:30:12.390Z",
    "dateUpdated": "2026-08-22T06:00:15.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-14187 (GCVE-0-2026-14187)

    Vulnerability from nvd – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Tutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR
    Summary
    The Tutor LMS WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/fb006829-e298-4b… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Tutor LMS Affected: 0 , < 4.0.6 (semver)
    		Create a notification for this product.
    Credits
    Mustafa Ahmed WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Tutor LMS",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mustafa Ahmed"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Tutor LMS  WordPress plugin before 4.0.6 does not enforce per-object ownership checks on its course content type, allowing any user with the instructor role to read the content of private courses belonging to other instructors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:15.786Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/fb006829-e298-4b22-9d62-293a3b917ccd/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Tutor LMS \u003c 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOR",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-14187",
    "datePublished": "2026-08-22T06:00:15.786Z",
    "dateReserved": "2026-06-30T08:17:41.878Z",
    "dateUpdated": "2026-08-22T06:00:15.786Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77116 (GCVE-0-2026-77116)

    Vulnerability from cvelistv5 – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
    Summary
    Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/db0a775c-cbac-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Brave Affected: 0 , < 0.8.6 (semver)
    		Create a notification for this product.
    Credits
    Huseyin Mertoglu WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Brave",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "0.8.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Huseyin Mertoglu"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough \u2014 can read popup content they shouldn\u0027t have access to by passing a post ID in the URL."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.405Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/db0a775c-cbac-4918-8b10-75f4fb2d716a/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Brave Popup Builder \u003c 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77116",
    "datePublished": "2026-08-23T06:00:18.405Z",
    "dateReserved": "2026-08-20T12:20:10.497Z",
    "dateUpdated": "2026-08-23T06:00:18.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77115 (GCVE-0-2026-77115)

    Vulnerability from cvelistv5 – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters
    Summary
    Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/d4a760c0-8e71-42… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Brave Affected: 0 , < 0.8.6 (semver)
    		Create a notification for this product.
    Credits
    Huseyin Mertoglu WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Brave",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "0.8.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Huseyin Mertoglu"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.239Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/d4a760c0-8e71-4261-a08b-9b6a296c631a/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Brave Popup Builder \u003c 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77115",
    "datePublished": "2026-08-23T06:00:18.239Z",
    "dateReserved": "2026-08-20T12:17:33.040Z",
    "dateUpdated": "2026-08-23T06:00:18.239Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77003 (GCVE-0-2026-77003)

    Vulnerability from cvelistv5 – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask
    Summary
    The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/1a78993c-1e5c-43… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Content Mask Affected: 1.8.0 , < 1.8.5.5 (semver)
    		Create a notification for this product.
    Credits
    Pablo González and Fran Ramírez WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Content Mask",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.8.5.5",
              "status": "affected",
              "version": "1.8.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Pablo Gonz\u00e1lez and Fran Ram\u00edrez"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Content Mask WordPress plugin before 1.8.5.5 does not check the capability required to publish the post type being created, allowing users with a role as low as Contributor to publish posts and pages on the site without holding the publish capability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:18.068Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/1a78993c-1e5c-43fb-9aa4-13edc24100ee/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77003",
    "datePublished": "2026-08-23T06:00:18.068Z",
    "dateReserved": "2026-08-20T07:27:14.074Z",
    "dateUpdated": "2026-08-23T06:00:18.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-14853 (GCVE-0-2026-14853)

    Vulnerability from cvelistv5 – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization
    Summary
    The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/dd6ec707-3943-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown WooCommerce Bookings Affected: 0 , < 3.9.0 (semver)
    		Create a notification for this product.
    Credits
    Mike Gozdiskowski WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "WooCommerce Bookings",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "3.9.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mike Gozdiskowski"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions, and its nonce check can be bypassed by omitting the token, allowing users with Subscriber-level access and above to create draft bookable products."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:17.863Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/dd6ec707-3943-49be-81bb-c5dd51f2c001/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "WooCommerce Bookings \u003c 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-14853",
    "datePublished": "2026-08-23T06:00:17.863Z",
    "dateReserved": "2026-07-06T11:54:58.068Z",
    "dateUpdated": "2026-08-23T06:00:17.863Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-13598 (GCVE-0-2026-13598)

    Vulnerability from cvelistv5 – Published: 2026-08-23 06:00 – Updated: 2026-08-23 06:00
    VLAI
    Title
    RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator
    Summary
    The RestrictMate WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/05fd8e45-92fa-4e… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown RestrictMate Affected: 0 , < 1.3.0 (semver)
    		Create a notification for this product.
    Credits
    João Ramos Maciel WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RestrictMate",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.3.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jo\u00e3o Ramos Maciel"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The RestrictMate  WordPress plugin before 1.3.0 does not restrict the user role supplied during account registration, allowing unauthenticated attackers to create a new administrator account and gain a logged-in administrator session, leading to full site takeover."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-23T06:00:17.682Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/05fd8e45-92fa-4ed4-ae59-9a7b7743ea34/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "RestrictMate \u003c 1.3.0 - Unauthenticated Privilege Escalation to Administrator",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-13598",
    "datePublished": "2026-08-23T06:00:17.682Z",
    "dateReserved": "2026-06-29T07:41:34.484Z",
    "dateUpdated": "2026-08-23T06:00:17.682Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77002 (GCVE-0-2026-77002)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass
    Summary
    The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/51236907-a1b4-4c… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown SmilePass Selfie Login Affected: 0 , ≤ 1.0.2 (semver)
    		Create a notification for this product.
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "SmilePass Selfie Login",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administrators."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.958Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/51236907-a1b4-4c3b-8c39-adafcab7a2ef/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SmilePass Selfie Login \u003c= 1.0.2 - Unauthenticated Authentication Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77002",
    "datePublished": "2026-08-22T06:00:17.958Z",
    "dateReserved": "2026-08-20T07:25:14.256Z",
    "dateUpdated": "2026-08-22T06:00:17.958Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77001 (GCVE-0-2026-77001)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass
    Summary
    The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user, including administrators. In the default case a session as the site's original administrator account is obtained without needing to know any account details at all.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/01c78c78-3915-44… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Social Login \u0026 Sharing buttons with Analytics By SoClever",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Social Login \u0026 Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user, including administrators. In the default case a session as the site\u0027s original administrator account is obtained without needing to know any account details at all."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.783Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/01c78c78-3915-44da-824a-f68074985c75/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Social Login \u0026 Sharing buttons with Analytics By SoClever \u003c= 1.2.0 - Unauthenticated Authentication Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77001",
    "datePublished": "2026-08-22T06:00:17.783Z",
    "dateReserved": "2026-08-20T07:24:49.747Z",
    "dateUpdated": "2026-08-22T06:00:17.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-77000 (GCVE-0-2026-77000)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow
    Summary
    The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user's email address.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/3051dece-7ecb-49… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown WP Social Media Login Affected: 0 , ≤ 1.0.6 (semver)
    		Create a notification for this product.
    Credits
    Khaled Alenazi (Nxploited) WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "WP Social Media Login",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Khaled Alenazi (Nxploited)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing user, including administrators, by supplying that user\u0027s email address."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.601Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/3051dece-7ecb-4911-bf13-291ebdc34bff/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "WP Social Media Login \u003c= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-77000",
    "datePublished": "2026-08-22T06:00:17.601Z",
    "dateReserved": "2026-08-20T07:24:00.357Z",
    "dateUpdated": "2026-08-22T06:00:17.601Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-76793 (GCVE-0-2026-76793)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Firebase Authentication < 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim
    Summary
    The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/0414ef2b-0d97-41… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Firebase Authentication Affected: 0 , < 1.7.1 (semver)
    		Create a notification for this product.
    Credits
    Abdullah Kareem WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Firebase Authentication",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Abdullah Kareem"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress account and issuing a session, allowing unauthenticated attackers to log in as any user, including administrators."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.419Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/0414ef2b-0d97-41c7-9146-f31ace8b66b2/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Firebase Authentication \u003c 1.7.1 - Unauthenticated Account Takeover via Firebase Email Claim",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-76793",
    "datePublished": "2026-08-22T06:00:17.419Z",
    "dateReserved": "2026-08-19T17:55:46.564Z",
    "dateUpdated": "2026-08-22T06:00:17.419Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-76789 (GCVE-0-2026-76789)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Slider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers
    Summary
    The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress plugin before 9.1.3's admin area, as well as any visitor of a page embedding a slider.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/f9f5485c-6231-49… exploitvdb-entrytechnical-description
    Impacted products
    Credits
    Artus KG WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Slider Hero with Video Background, Animation",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.1.3",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Artus KG"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not escape a stored setting before outputting it, allowing unauthenticated users to store malicious JavaScript which will be executed in the context of an administrator viewing the Slider Hero with Video Background, Animation WordPress plugin before 9.1.3\u0027s admin area, as well as any visitor of a page embedding a slider."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.246Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/f9f5485c-6231-492c-b214-8da87a2bf4d1/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Slider Hero \u003c 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider Handlers",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-76789",
    "datePublished": "2026-08-22T06:00:17.246Z",
    "dateReserved": "2026-08-19T17:55:37.640Z",
    "dateUpdated": "2026-08-22T06:00:17.246Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-19222 (GCVE-0-2026-19222)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Forminator Forms < 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass
    Summary
    The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/bb3997c6-4d9a-46… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Forminator Forms Affected: 0 , < 1.57.0.7 (semver)
    		Create a notification for this product.
    Credits
    Thanh Lam Tang WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Forminator Forms",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.57.0.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanh Lam Tang"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Forminator Forms  WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitted to build forms to configure one that assigns the administrator role to any visitor who registers through it."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:17.071Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/bb3997c6-4d9a-46f6-85d7-d472dfc00829/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Forminator Forms \u003c 1.57.0.7 - Authenticated Privilege Escalation via Registration Form Role Bypass",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-19222",
    "datePublished": "2026-08-22T06:00:17.071Z",
    "dateReserved": "2026-08-07T09:04:29.255Z",
    "dateUpdated": "2026-08-22T06:00:17.071Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-19221 (GCVE-0-2026-19221)

    Vulnerability from cvelistv5 – Published: 2026-08-22 06:00 – Updated: 2026-08-22 06:00
    VLAI
    Title
    Forminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite
    Summary
    The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.
    Severity
    No CVSS data available.
    CWE
    Assigner
    References
    URL Tags
    https://wpscan.com/vulnerability/5aa85c72-2a60-42… exploitvdb-entrytechnical-description
    Impacted products
    Vendor Product Version
    Unknown Forminator Forms Affected: 1.40.0 , < 1.57.0.5 (semver)
    		Create a notification for this product.
    Credits
    Jakub Herman WPScan
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Forminator Forms",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.57.0.5",
              "status": "affected",
              "version": "1.40.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Jakub Herman"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Forminator Forms  WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-22T06:00:16.858Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/5aa85c72-2a60-4243-b370-ef0b46e98cfe/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Forminator Forms \u003c 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2026-19221",
    "datePublished": "2026-08-22T06:00:16.858Z",
    "dateReserved": "2026-08-07T09:04:27.327Z",
    "dateUpdated": "2026-08-22T06:00:16.858Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}