Filtered by vendor Wordpress Subscriptions
Filtered by product Wordpress Subscriptions
Total 16195 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-39548 2 Sneeit, Wordpress 2 Magone, Wordpress 2026-06-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.
CVE-2026-40736 2 Edge-themes, Wordpress 2 Laurits, Wordpress 2026-06-21 8.1 High
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
CVE-2026-40760 2 Edge-themes, Wordpress 2 Behold, Wordpress 2026-06-21 8.1 High
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
CVE-2026-40761 2 Edge-themes, Wordpress 2 Valeska, Wordpress 2026-06-21 8.1 High
Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
CVE-2026-49057 2 Eyecix Technologies, Wordpress 2 Jobsearch, Wordpress 2026-06-21 7.5 High
Unauthenticated Broken Access Control in JobSearch <= 3.2.7 versions.
CVE-2026-49080 2 Tms, Wordpress 2 Wpdatatables, Wordpress 2026-06-21 9.3 Critical
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
CVE-2026-49113 2 Themeco, Wordpress 2 Cornerstone, Wordpress 2026-06-21 8.5 High
Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.
CVE-2026-40722 2 Wordpress, Yoast Bv 2 Wordpress, Yoast Seo Premium 2026-06-21 5.5 Medium
Missing Authorization vulnerability in Yoast BV Yoast SEO Premium allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Yoast SEO Premium: from n/a through 26.6.
CVE-2025-59560 2 Sonaar Music, Wordpress 2 Sonaar, Wordpress 2026-06-21 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions.
CVE-2025-59563 2 Sonaar Music, Wordpress 2 Sonaar, Wordpress 2026-06-21 8.8 High
Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.
CVE-2025-60218 2 Wordpress, Wplocker 2 Wordpress, Pt Luxa Addons 2026-06-21 9.9 Critical
Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.
CVE-2025-60223 2 Quantumcloud, Wordpress 2 Wpbot Pro Wordpress Chatbot, Wordpress 2026-06-21 7.7 High
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.
CVE-2025-69110 2 Themerex, Wordpress 2 Airsupply, Wordpress 2026-06-21 8.1 High
Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.
CVE-2025-69129 2 Extendons, Wordpress 3 Wordpress & Woocommerce Scraper Plugin, Wordpress & Woocommerce Scraper Plugin, Import Data From Any Site, Wordpress 2026-06-21 10 Critical
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
CVE-2025-69135 2 Curlythemes, Wordpress 2 Events Schedule - Wordpress Events Calendar Plugin, Wordpress 2026-06-21 8.5 High
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.
CVE-2025-69138 2 Jthemes, Wordpress 2 Genemy, Wordpress 2026-06-21 8.8 High
Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
CVE-2025-69161 2 Themerex, Wordpress 2 Snowy, Wordpress 2026-06-21 8.1 High
Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
CVE-2025-69171 2 Themerex, Wordpress 2 Orpheus, Wordpress 2026-06-21 8.1 High
Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
CVE-2025-69179 2 Theme Passion, Wordpress 2 Support Ticket Management System, Wordpress 2026-06-21 9.8 Critical
Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.
CVE-2026-27041 2 Studio Keren Aga Ltd., Wordpress 2 Unlimited Elements For Elementor (premium), Wordpress 2026-06-21 9.9 Critical
Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.